Make Yubikey login sufficient

This should be fine as I have to login with the encryption key on boot
anyway.
This commit is contained in:
Malte Tammena 2021-08-17 14:58:49 +02:00
parent 54a834785e
commit a5cb1d24e4

View file

@ -5,7 +5,7 @@ let
# Account management.
account required pam_unix.so
# Authentication management.
auth required /nix/store/nyqhrbwgisnfj99m5v384czf7rqs67kw-yubico-pam-unstable-2019-07-01/lib/security/pam_yubico.so mode=challenge-response
auth sufficient /nix/store/nyqhrbwgisnfj99m5v384czf7rqs67kw-yubico-pam-unstable-2019-07-01/lib/security/pam_yubico.so mode=challenge-response
auth sufficient /nix/store/fh3nczz4raw0ivnys933w0q8jqvxq4j3-fprintd-1.90.9/lib/security/pam_fprintd.so
auth sufficient pam_unix.so nullok likeauth try_first_pass
auth required pam_deny.so