search

vmihalko / t2_polkit

Other
0 stars 0 forks source link

No graphical indication when using U2F with polkit #127

Closed vmihalko closed 1 year ago

vmihalko commented 4 years ago

In GitLab by @tonekaboni on Jun 17, 2020, 17:20

I added authentication with u2f/FIDO (pam_u2f.so) to my PAM configuration and include that in /etc/pam.d/polkit-1

It's working, but when it expect from me to grant auth via tap, the only indication is the blinking LED from my security-key.

I suggest an UI similar to Firefox, where I know I should tap my device now or to abort it, when the correct key isn't present.

gnome-settings crashed, because the correct key wasn't there and I couldn't abort.

How to test it:

  1. Configure pam_u2f for polkit-1
  2. Open Terminal and type "pkexec id"

Expectation: UI requesting U2F-security-key

Maybe this is a general pam_u2f problem, too.

Bildschirmfoto_vom_2020-06-17_17-17-17 polkit-1 u2f-auth

vmihalko commented 4 years ago

In GitLab by @tonekaboni on Jun 17, 2020, 17:36

closed

vmihalko commented 4 years ago

In GitLab by @tonekaboni on Jun 17, 2020, 17:39

Sorry, just find out that there is a option "cue", which triggers the UI. It's not perfect, but works. The text is very small.

Bildschirmfoto_von_2020-06-17_17-38-00