# GNOME/GDM Fingerprint Feedback Deployment

This repository provides a team-friendly deployment path for faster visible
fingerprint failure feedback on Fedora systems using authselect.

## Files
- `tools/gnome_fprint_feedback_setup.sh`
- `tools/gnome_fprint_feedback_rollback.sh`

## Apply

Default (recommended):

```bash
cd /path/to/Fedora_Fingerprint_Feedback
sudo ./tools/gnome_fprint_feedback_setup.sh
```

Custom tuning:

```bash
sudo ./tools/gnome_fprint_feedback_setup.sh --max-tries 3 --timeout 20
```

## Validate

```bash
authselect current --raw
authselect check
grep pam_fprintd /etc/authselect/custom/local-fprint-feedback/fingerprint-auth
grep pam_fprintd /etc/pam.d/fingerprint-auth
```

Expected effective line:

```text
pam_fprintd.so max-tries=3 timeout=20
```

## Rollback

Restore previous authselect selection saved during setup:

```bash
cd /path/to/Fedora_Fingerprint_Feedback
sudo ./tools/gnome_fprint_feedback_rollback.sh
```

Rollback and remove custom profile directory:

```bash
sudo ./tools/gnome_fprint_feedback_rollback.sh --remove-profile
```

## Notes
- Scripts must be run as root.
- The defaults are intentionally long enough for GNOME unlock after suspend;
  too-short timeouts can make fingerprint unlock appear unavailable.
- Setup stores previous `authselect current --raw` in:
  - `/etc/authselect/custom/local-fprint-feedback/.previous-authselect-raw`
- If no saved state exists, rollback falls back to:
  - `local with-fingerprint with-silent-lastlog with-mdns4`