Add fprintd and necessary support in gnome

[Jacalz]

Fedora currently have a stunningly great integration of fprintd as the fingerprint reader manager and driver utility that makes it possible to add fingerprints and unlock the system using them. I suggest having it packaged and possibly installed by default along with the necessary support needed. All the things are possible and done in Fedora except for the password needing to be used to change the fingerprint, it was suggested in the arch wiki. Please add more stuff to the list if there was something I missed when using Fedora!

Integration points:

• [ ] Add the fprintd package bundle with libfprint
• [ ] Enable unlocking of sudo password once fingerprint is set (it switches over to normal password if not fingerprint is entered, but timeout could be shorter than on Fedora)
• [ ] Force need to use password to change and add password (not done in Fedora yet)
• [ ] Perhaps add documentation on how to set up the fingerprint on Clear Linux

Gnome specifics:

• [ ] Allow fingerprint unlocking of GDM when logging in to Gnome desktop
• [ ] Wire in support in to the gnome-control-center
• [ ] Unlocking gnome-screensaver using fingerprint

Additional points of reference:

Fingerprint integration page on Fedora wiki can be found here. The ArchWiki page can be found here.

Some image examples:

[bryteise]

Hrm @mrkz, @bktan8 do you have any systems around with a fingerprint reader?

[bktan8]

@bryteise - Yes, I have a Lenovo X1 Yoga.

[mrkz]

Yes, got a Lenovo T570 to play with, yet I'd like to focus more on other issues on my pile, but really looking forward to get this working on CLR :tada:

[ghost]

Looking forward for it too ! I have and x230 to test if interested, I could try to make a bundle if I have a comprehensive doc on how to make one that specific

[ghost]

Fingerprint support would be very much appreciated.

[Aqua1ung]

@fenrus75, any chance we could see fprintd added to CL bundles please? Or is that too much of a security risk?

[fenrus75]

I have added the package (and bundle) but I have no way to test this.... so I'll need to depend on y'all to give it the thumbs up or down

On Thu, Jun 22, 2023 at 7:29 AM Cristian Cocos @.***> wrote:

@fenrus75 https://github.com/fenrus75, any chance we could see fprintd added to CL bundles please? Or is that too much of a security risk?

— Reply to this email directly, view it on GitHub https://github.com/clearlinux/distribution/issues/719#issuecomment-1602743858, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAJ54FJRNW2LFLMICQP5XW3XMRJGNANCNFSM4HMRIJLQ . You are receiving this because you were mentioned.Message ID: @.***>

[Aqua1ung]

I have added the package (and bundle) but I have no way to test this.... so I'll need to depend on y'all to give it the thumbs up or down

Excellent, thank you! I'll do my best to test it and report back!

[worldofgeese]

@fenrus75 I am able to enroll but receive "Permission denied" when attempting to use my fingerprint at the GDM login screen. fprintd-verify shows valid fingerprint.

❯ fprintd-verify
Using device /net/reactivated/Fprint/Device/0
Listing enrolled fingers:
 - #0: right-ring-finger
Verify started!
Verifying: right-ring-finger
Verify result: verify-match (done)

EDIT: it does work on resuming from suspend. Just not logging in.

Aug 28 12:54:05 clr-c9ad71bd09e141f58d883417e69f3f4b fprintd[8454]: Authorization denied to :1.211 to call method 'Claim' for device 'Goodix MOC Fingerprint Sensor': Device was already claimed
Aug 28 12:54:36 clr-c9ad71bd09e141f58d883417e69f3f4b systemd[1]: fprintd.service: Deactivated successfully.
Aug 28 12:57:03 clr-c9ad71bd09e141f58d883417e69f3f4b dbus-daemon[503]: [system] Activating via systemd: service name='net.reactivated.Fprint' unit='fprintd.service' requested by ':1.218' (uid=1000 pid=9336 comm="/usr/bin/gnome-shell")
Aug 28 12:57:03 clr-c9ad71bd09e141f58d883417e69f3f4b systemd[1]: Starting fprintd.service...
Aug 28 12:57:03 clr-c9ad71bd09e141f58d883417e69f3f4b fprintd[11804]: Could not open "/etc/fprintd.conf": No such file or directory
Aug 28 12:57:03 clr-c9ad71bd09e141f58d883417e69f3f4b fprintd[11804]: libusb: error [udev_hotplug_event] ignoring udev action change
Aug 28 12:57:03 clr-c9ad71bd09e141f58d883417e69f3f4b systemd[1]: Started fprintd.service.
Aug 28 12:57:03 clr-c9ad71bd09e141f58d883417e69f3f4b fprintd[11804]: libusb: error [udev_hotplug_event] ignoring udev action change
Aug 28 12:57:04 clr-c9ad71bd09e141f58d883417e69f3f4b fprintd[11804]: libusb: error [udev_hotplug_event] ignoring udev action change
Aug 28 12:57:04 clr-c9ad71bd09e141f58d883417e69f3f4b fprintd[11804]: libusb: error [udev_hotplug_event] ignoring udev action change

[Bear-Essentials]

Ive added the bundle on my X13 Yoga gen2 and works without issue