PAM really needs to be ravamped and support for (among other things) running multiple stacks in par@llel added. This way you could ask for a password OR a fingerprint
replyKeypassxc does it perfectly.
replyEveryone doing parallel biometric and password authentication on Linux today is either running two PAM stacks in parallel (which is meta-policy that kind of defeats the purpose of PAM) or just bypassing PAM entirely.
replyFingerprint is an authentication mechanism, not an authorization one.
replyIt's both.
reply