--wip-- [skip ci]

instances/sif/configuration.nix

@@ -353,32 +353,23 @@
   '';
   security.pam.services = {
     xscreensaver.fprintAuth = true;
-    gdm = {
+    gdm = { enableGnomeKeyring = true; fprintAuth = true; };
-      enableGnomeKeyring = true;
+    # sudo = {
-      fprintAuth = true;
+    #   fprintAuth = true;
-    };
+    #   rootOK = true;
-    sudo = {
+    #   forwardXAuth = true;
-      fprintAuth = true;
+    #   logFailures = true;
-      rootOK = true;
-      forwardXAuth = true;
-      logFailures = true;
-      text = ''
-        auth            sufficient      pam_rootok.so
-        # Uncomment the following line to implicitly trust users in the "wheel" group.
-        #auth           sufficient      pam_wheel.so trust use_uid
-        # Uncomment the following line to require a user to be in the "wheel" group.
-        auth            required        pam_wheel.so use_uid
-        auth            required        pam_unix.so
-        account         required        pam_unix.so
-        session         required        pam_unix.so
-      '';
-      # enableGnomeKeyring = true;
     #   text = ''
-      #   auth		include		system-auth-fprintd
+    #     auth    [success=ok default=bad]  pam_unix.so nullok_secure
-      #   account		include		system-auth
+    #     auth    [success=2 default=bad]   pam_fprintd.so
-      #   session		include		system-auth
     #   '';
-    };
+    #   # enableGnomeKeyring = true;
+    #   # text = ''
+    #   #   auth		include		system-auth-fprintd
+    #   #   account		include		system-auth
+    #   #   session		include		system-auth
+    #   # '';
+    # };
   };
 
   nixpkgs.config = {