Tune fingerprint feedback defaults

This commit is contained in:
jan
2026-04-24 14:20:44 +02:00
parent e91a02685a
commit f5dcaed5d0
3 changed files with 13 additions and 7 deletions

View File

@@ -10,9 +10,13 @@ in GNOME/GDM on Fedora systems managed by `authselect`.
## Quick start ## Quick start
```bash ```bash
sudo ./tools/gnome_fprint_feedback_setup.sh --max-tries 2 --timeout 6 sudo ./tools/gnome_fprint_feedback_setup.sh
``` ```
The default tuning uses `max-tries=3 timeout=20`, which keeps fingerprint
unlock available long enough after lockout or suspend while still providing
clear failure feedback.
## Rollback ## Rollback
```bash ```bash
sudo ./tools/gnome_fprint_feedback_rollback.sh sudo ./tools/gnome_fprint_feedback_rollback.sh

View File

@@ -19,7 +19,7 @@ sudo ./tools/gnome_fprint_feedback_setup.sh
Custom tuning: Custom tuning:
```bash ```bash
sudo ./tools/gnome_fprint_feedback_setup.sh --max-tries 2 --timeout 6 sudo ./tools/gnome_fprint_feedback_setup.sh --max-tries 3 --timeout 20
``` ```
## Validate ## Validate
@@ -34,7 +34,7 @@ grep pam_fprintd /etc/pam.d/fingerprint-auth
Expected effective line: Expected effective line:
```text ```text
pam_fprintd.so max-tries=2 timeout=6 pam_fprintd.so max-tries=3 timeout=20
``` ```
## Rollback ## Rollback
@@ -54,6 +54,8 @@ sudo ./tools/gnome_fprint_feedback_rollback.sh --remove-profile
## Notes ## Notes
- Scripts must be run as root. - Scripts must be run as root.
- The defaults are intentionally long enough for GNOME unlock after suspend;
too-short timeouts can make fingerprint unlock appear unavailable.
- Setup stores previous `authselect current --raw` in: - Setup stores previous `authselect current --raw` in:
- `/etc/authselect/custom/local-fprint-feedback/.previous-authselect-raw` - `/etc/authselect/custom/local-fprint-feedback/.previous-authselect-raw`
- If no saved state exists, rollback falls back to: - If no saved state exists, rollback falls back to:

8
tools/gnome_fprint_feedback_setup.sh Normal file → Executable file
View File

@@ -13,15 +13,15 @@ Applies an authselect custom profile that sets pam_fprintd parameters
for faster visible fingerprint failure feedback in GDM/GNOME unlock. for faster visible fingerprint failure feedback in GDM/GNOME unlock.
Options: Options:
--max-tries N Fingerprint tries before failure (default: 2) --max-tries N Fingerprint tries before failure (default: 3)
--timeout SEC Fingerprint timeout in seconds (default: 6) --timeout SEC Fingerprint timeout in seconds (default: 20)
--profile NAME Custom authselect profile name (default: local-fprint-feedback) --profile NAME Custom authselect profile name (default: local-fprint-feedback)
-h, --help Show this help -h, --help Show this help
USAGE USAGE
} }
MAX_TRIES=2 MAX_TRIES=3
TIMEOUT=6 TIMEOUT=20
while [[ $# -gt 0 ]]; do while [[ $# -gt 0 ]]; do
case "$1" in case "$1" in