[GTALUG] suggestion: disable fprintd
D. Hugh Redelmeier
hugh at mimosa.com
Fri Nov 10 12:52:35 EST 2017
fprintd(1) handles finger-print recognition for some kind of
authentication (logins and who knows what else).
At least on my current Fedora and CentOS systems, fprintd is automatically
enabled. I don't know about other systems.
Most of my systems have no fingerprint hardware, so the only effect is to
polute the log. Here's an example:
Nov 10 10:30:14 redface-mimosa-com dbus-daemon[637]: dbus[637]: [system] Activating via systemd: service name='net.reactivated.Fprint' unit='fprintd.service'
Nov 10 10:30:14 redface-mimosa-com dbus[637]: [system] Activating via systemd: service name='net.reactivated.Fprint' unit='fprintd.service'
Nov 10 10:30:14 redface-mimosa-com systemd[1]: Starting Fingerprint Authentication Daemon...
Nov 10 10:30:14 redface-mimosa-com dbus[637]: [system] Successfully activated service 'net.reactivated.Fprint'
Nov 10 10:30:14 redface-mimosa-com dbus-daemon[637]: dbus[637]: [system] Successfully activated service 'net.reactivated.Fprint'
Nov 10 10:30:14 redface-mimosa-com systemd[1]: Started Fingerprint Authentication Daemon.
Nov 10 10:30:14 redface-mimosa-com fprintd[28994]: Launching FprintObject
Nov 10 10:30:14 redface-mimosa-com fprintd[28994]: D-Bus service launched with name: net.reactivated.Fprint
Nov 10 10:30:14 redface-mimosa-com fprintd[28994]: entering main loop
Nov 10 10:30:45 redface-mimosa-com fprintd[28994]: No devices in use, exit
This happens every once in a while. I don't know what triggers it. Perhaps logins.
I have a machine or two with fingerprint hardware. One scary effect is to
compromise security -- fingerprints are probably easy to fake. This is
only a problem if someone has enrolled in the fprintd system. Otherwise
there is neither risk nor reward
So: in both cases, it is probably a good idea to:
sudo systemctl disable fprintd
PS: I think that calling this fprintd instead of fingerprintd is a bit
confusing. I used to assume these entries were about printing.
More information about the talk
mailing list