# GNOME/GDM Fingerprint Feedback Deployment

This provides a team-friendly deployment path for faster visible fingerprint failure feedback on Fedora systems using authselect.

## Files
- `tools/gnome_fprint_feedback_setup.sh`
- `tools/gnome_fprint_feedback_rollback.sh`

## Apply

Default (recommended):

```bash
cd /home/jan/Documents/RFP/WLED-MM/repo
sudo ./tools/gnome_fprint_feedback_setup.sh
```

Custom tuning:

```bash
sudo ./tools/gnome_fprint_feedback_setup.sh --max-tries 2 --timeout 6
```

## Validate

```bash
authselect current --raw
authselect check
grep pam_fprintd /etc/authselect/custom/local-fprint-feedback/fingerprint-auth
grep pam_fprintd /etc/pam.d/fingerprint-auth
```

Expected effective line:

```text
pam_fprintd.so max-tries=2 timeout=6
```

## Rollback

Restore previous authselect selection saved during setup:

```bash
cd /home/jan/Documents/RFP/WLED-MM/repo
sudo ./tools/gnome_fprint_feedback_rollback.sh
```

Rollback and remove custom profile directory:

```bash
sudo ./tools/gnome_fprint_feedback_rollback.sh --remove-profile
```

## Notes
- Scripts must be run as root.
- Setup stores previous `authselect current --raw` in:
  - `/etc/authselect/custom/local-fprint-feedback/.previous-authselect-raw`
- If no saved state exists, rollback falls back to:
  - `local with-fingerprint with-silent-lastlog with-mdns4`