From 67e3c97e35d8ae7294a2b1b4242aebf00eb74042 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pavel=20B=C5=99ezina?= Date: Thu, 4 Mar 2021 12:09:27 +0100 Subject: [PATCH] authselect-1.2.2-5: add dconf settings to minimal profile to explicitly disable fingerprint and smartcard authentication Resolves: rhbz#1933520 --- ...f-settings-to-explicitly-disable-fpr.patch | 49 +++++++++++++++++++ authselect.spec | 9 +++- 2 files changed, 57 insertions(+), 1 deletion(-) create mode 100644 0001-minimal-add-dconf-settings-to-explicitly-disable-fpr.patch diff --git a/0001-minimal-add-dconf-settings-to-explicitly-disable-fpr.patch b/0001-minimal-add-dconf-settings-to-explicitly-disable-fpr.patch new file mode 100644 index 0000000..b6de965 --- /dev/null +++ b/0001-minimal-add-dconf-settings-to-explicitly-disable-fpr.patch @@ -0,0 +1,49 @@ +From 41197d567e0ef15cdd50b9e7658e9a0b205e6683 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Pavel=20B=C5=99ezina?= +Date: Thu, 4 Mar 2021 11:59:37 +0100 +Subject: [PATCH] minimal: add dconf settings to explicitly disable fprint and + smartcard authentication + +Resolves: +https://github.com/authselect/authselect/issues/237 +--- + profiles/Makefile.am | 2 ++ + profiles/minimal/dconf-db | 3 +++ + profiles/minimal/dconf-locks | 2 ++ + 3 files changed, 7 insertions(+) + create mode 100644 profiles/minimal/dconf-db + create mode 100644 profiles/minimal/dconf-locks + +diff --git a/profiles/Makefile.am b/profiles/Makefile.am +index 5dfab8047fc956babe47180601a0336c0a55d15f..95e27147b2b0a229a76a293884d605484d3fa841 100644 +--- a/profiles/Makefile.am ++++ b/profiles/Makefile.am +@@ -9,6 +9,8 @@ dist_profile_minimal_DATA = \ + $(top_srcdir)/profiles/minimal/README \ + $(top_srcdir)/profiles/minimal/REQUIREMENTS \ + $(top_srcdir)/profiles/minimal/system-auth \ ++ $(top_srcdir)/profiles/minimal/dconf-db \ ++ $(top_srcdir)/profiles/minimal/dconf-locks \ + $(NULL) + + profile_nisdir = $(authselect_profile_dir)/nis +diff --git a/profiles/minimal/dconf-db b/profiles/minimal/dconf-db +new file mode 100644 +index 0000000000000000000000000000000000000000..a3868b794bdf9d8d6edf8363b15cb918539b8926 +--- /dev/null ++++ b/profiles/minimal/dconf-db +@@ -0,0 +1,3 @@ ++[org/gnome/login-screen] ++enable-smartcard-authentication=false ++enable-fingerprint-authentication=false +diff --git a/profiles/minimal/dconf-locks b/profiles/minimal/dconf-locks +new file mode 100644 +index 0000000000000000000000000000000000000000..8a36fa9568344338272786394aece872185d0ab3 +--- /dev/null ++++ b/profiles/minimal/dconf-locks +@@ -0,0 +1,2 @@ ++/org/gnome/login-screen/enable-smartcard-authentication ++/org/gnome/login-screen/enable-fingerprint-authentication +-- +2.29.2 + diff --git a/authselect.spec b/authselect.spec index a4c0051..360625d 100644 --- a/authselect.spec +++ b/authselect.spec @@ -3,13 +3,15 @@ Name: authselect Version: 1.2.2 -Release: 2%{?dist} +Release: 3%{?dist} Summary: Configures authentication and identity sources from supported profiles URL: https://github.com/authselect/authselect License: GPLv3+ Source0: %{url}/archive/%{version}/%{name}-%{version}.tar.gz +Patch0001: 0001-minimal-add-dconf-settings-to-explicitly-disable-fpr.patch + %global makedir %{_builddir}/%{name}-%{version} BuildRequires: autoconf @@ -148,6 +150,8 @@ find $RPM_BUILD_ROOT -name "*.a" -exec %__rm -f {} \; %dir %{_datadir}/authselect/default/nis/ %dir %{_datadir}/authselect/default/sssd/ %dir %{_datadir}/authselect/default/winbind/ +%{_datadir}/authselect/default/minimal/dconf-db +%{_datadir}/authselect/default/minimal/dconf-locks %{_datadir}/authselect/default/minimal/nsswitch.conf %{_datadir}/authselect/default/minimal/password-auth %{_datadir}/authselect/default/minimal/postlogin @@ -290,6 +294,9 @@ exit 0 exit 0 %changelog +* Thu Mar 4 2021 Pavel Březina - 1.2.2-3 +- minimal: add dconf settings to explicitly disable fingerprint and smartcard authentication + * Tue Jan 26 2021 Fedora Release Engineering - 1.2.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild