cce-display-manager: pam/cce-display-manager-fprint

git clone https://git.lucas.co/cce-display-manager.git

pam/cce-display-manager-fprint (664B)

 1 #%PAM-1.0
 2 # Fingerprint-only service used by the greeter for its background / empty-
 3 # password attempt. `requisite` ends the auth stack the moment pam_fprintd
 4 # fails, so a fingerprint miss (or a timeout, or a "device already claimed"
 5 # error) can never fall through into pam_unix with an empty password. That
 6 # fall-through was a pam_faillock strike each time: three fingerprint misses
 7 # locked the account, and then the correct password was silently rejected
 8 # for ten minutes (2026-08-17). No system-local-login include on purpose.
 9 
10 auth       requisite    pam_fprintd.so
11 
12 account    include      system-local-login
13 
14 session    include      system-local-login