diff --git a/modules/applications/swaylock/system.nix b/modules/applications/swaylock/system.nix index 28304d2..eaa0bc5 100644 --- a/modules/applications/swaylock/system.nix +++ b/modules/applications/swaylock/system.nix @@ -15,5 +15,12 @@ in services.systemd-lock-handler.enable = true; security.pam.services.swaylock.fprintAuth = true; + + # PAM authentication is serial. Let a supplied password succeed before + # starting fprintd, whose scan otherwise blocks password verification until + # its timeout expires. Submit an empty password to start fingerprint + # authentication in upstream swaylock. + security.pam.services.swaylock.rules.auth.fprintd.order = + config.security.pam.services.swaylock.rules.auth.unix.order + 50; }; }