[systemd-devel] Unit Names and Environment File Variable Names - Inconsistent Character Sets and Shortcomings with Unit Name Specifiers

2022-04-26 Thread James Feeney
I thought perhaps to file this as a bug report, since the shortcomings are so glaring, and the three proposed fixes - and documentation updates - are so specific. But instead, maybe some discussion would be appropriate. I want to address three issues and corresponding fixes: 1) adding a speci

[systemd-devel] Splitting sd-boot from systemd/bootctl for enabling sd-boot in Fedora

2022-04-26 Thread Neal Gompa
Hey all, Some of you might know about the recent discussion in Fedora about dropping BIOS support[1][2]. While the end result for now is that we're not dropping it[3], several side discussions involved enabling systemd-boot as an option in Fedora in the future. While I *personally* am not a huge

Re: [systemd-devel] Disallowing fingerprint authentication if pam_systemd_home.so needs a password

2022-04-26 Thread Lennart Poettering
On Di, 26.04.22 12:24, Benjamin Berg (benja...@sipsolutions.net) wrote: > > In my idealized world, homed would talk to fprintd, asking it for > > enrollment, then fprintd goes through the enrollment or authentication > > process, always informing homed about the steps that it is doing which > > we

Re: [systemd-devel] Disallowing fingerprint authentication if pam_systemd_home.so needs a password

2022-04-26 Thread Benjamin Berg
On Tue, 2022-04-26 at 11:02 +0200, Lennart Poettering wrote: > On Mo, 25.04.22 18:15, Benjamin Berg (benja...@sipsolutions.net) wrote: > > > > So, permitting fingerprint auth while homedir is unlocked might still > > > be worthy though, i.e. for sudo or polkit kind of reauthentication > > > during

Re: [systemd-devel] Disallowing fingerprint authentication if pam_systemd_home.so needs a password

2022-04-26 Thread Lennart Poettering
On Mo, 25.04.22 18:15, Benjamin Berg (benja...@sipsolutions.net) wrote: > > So, permitting fingerprint auth while homedir is unlocked might still > > be worthy though, i.e. for sudo or polkit kind of reauthentication > > during a running session. But for that kind of stuff I'd probably > > prefer

Re: [systemd-devel] Antw: [EXT] Re: Disallowing fingerprint authentication if pam_systemd_home.so needs a password

2022-04-26 Thread Benjamin Berg
Hello, On Tue, 2022-04-26 at 10:11 +0300, juice wrote: > On 4/26/22 09:41, Ulrich Windl wrote: > > > Using fingerprint for *authentication* is totally broken concept which > > > should never be allowed. > > Why? Is a PIN any better? > > PIN is much better. You will not be leaving your PIN to any

Re: [systemd-devel] Antw: [EXT] Re: Disallowing fingerprint authentication if pam_systemd_home.so needs a password

2022-04-26 Thread Ulrich Windl
>>> juice schrieb am 26.04.2022 um 09:11 in Nachricht <2a780de8-efb2-749b-de43-62978958f...@swagman.org>: > On 4/26/22 09:41, Ulrich Windl wrote: >>> >>> Using fingerprint for *authentication* is totally broken concept which >>> should never be allowed. >> Why? Is a PIN any better? > > PIN is muc