authselect-1.2.2-5: add dconf settings to minimal profile to explicitly disable fingerprint and smartcard authentication

Resolves: rhbz#1933520

0001-minimal-add-dconf-settings-to-explicitly-disable-fpr.patch

@@ -0,0 +1,49 @@
+From 41197d567e0ef15cdd50b9e7658e9a0b205e6683 Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina@redhat.com>
+Date: Thu, 4 Mar 2021 11:59:37 +0100
+Subject: [PATCH] minimal: add dconf settings to explicitly disable fprint and
+ smartcard authentication
+
+Resolves:
+https://github.com/authselect/authselect/issues/237
+---
+ profiles/Makefile.am         | 2 ++
+ profiles/minimal/dconf-db    | 3 +++
+ profiles/minimal/dconf-locks | 2 ++
+ 3 files changed, 7 insertions(+)
+ create mode 100644 profiles/minimal/dconf-db
+ create mode 100644 profiles/minimal/dconf-locks
+
+diff --git a/profiles/Makefile.am b/profiles/Makefile.am
+index 5dfab8047fc956babe47180601a0336c0a55d15f..95e27147b2b0a229a76a293884d605484d3fa841 100644
+--- a/profiles/Makefile.am
++++ b/profiles/Makefile.am
+@@ -9,6 +9,8 @@ dist_profile_minimal_DATA = \
+     $(top_srcdir)/profiles/minimal/README \
+     $(top_srcdir)/profiles/minimal/REQUIREMENTS \
+     $(top_srcdir)/profiles/minimal/system-auth \
++    $(top_srcdir)/profiles/minimal/dconf-db \
++    $(top_srcdir)/profiles/minimal/dconf-locks \
+     $(NULL)
+ 
+ profile_nisdir = $(authselect_profile_dir)/nis
+diff --git a/profiles/minimal/dconf-db b/profiles/minimal/dconf-db
+new file mode 100644
+index 0000000000000000000000000000000000000000..a3868b794bdf9d8d6edf8363b15cb918539b8926
+--- /dev/null
++++ b/profiles/minimal/dconf-db
+@@ -0,0 +1,3 @@
++[org/gnome/login-screen]
++enable-smartcard-authentication=false
++enable-fingerprint-authentication=false
+diff --git a/profiles/minimal/dconf-locks b/profiles/minimal/dconf-locks
+new file mode 100644
+index 0000000000000000000000000000000000000000..8a36fa9568344338272786394aece872185d0ab3
+--- /dev/null
++++ b/profiles/minimal/dconf-locks
+@@ -0,0 +1,2 @@
++/org/gnome/login-screen/enable-smartcard-authentication
++/org/gnome/login-screen/enable-fingerprint-authentication
+-- 
+2.29.2
+

authselect.spec

@@ -3,13 +3,15 @@
 
 Name:           authselect
 Version:        1.2.2
-Release:        2%{?dist}
+Release:        3%{?dist}
 Summary:        Configures authentication and identity sources from supported profiles
 URL:            https://github.com/authselect/authselect
 
 License:        GPLv3+
 Source0:        %{url}/archive/%{version}/%{name}-%{version}.tar.gz
 
+Patch0001: 0001-minimal-add-dconf-settings-to-explicitly-disable-fpr.patch
+
 %global makedir %{_builddir}/%{name}-%{version}
 
 BuildRequires:  autoconf
@@ -148,6 +150,8 @@ find $RPM_BUILD_ROOT -name "*.a" -exec %__rm -f {} \;
 %dir %{_datadir}/authselect/default/nis/
 %dir %{_datadir}/authselect/default/sssd/
 %dir %{_datadir}/authselect/default/winbind/
+%{_datadir}/authselect/default/minimal/dconf-db
+%{_datadir}/authselect/default/minimal/dconf-locks
 %{_datadir}/authselect/default/minimal/nsswitch.conf
 %{_datadir}/authselect/default/minimal/password-auth
 %{_datadir}/authselect/default/minimal/postlogin
@@ -290,6 +294,9 @@ exit 0
 exit 0
 
 %changelog
+* Thu Mar 4 2021 Pavel Březina <pbrezina@redhat.com> - 1.2.2-3
+- minimal: add dconf settings to explicitly disable fingerprint and smartcard authentication
+
 * Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.2-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild