deck@bazzite:/var/home/deck$ ujust check-local-overrides
diff -r --suppress-common-lines '--color=always' --exclude 'passwd*' --exclude 'group*' '--exclude=subgid*' '--exclude=subuid*' '--exclude=machine-id' '--exclude=adjtime' '--exclude=fstab' '--exclude=system-connections' '--exclude=shadow*' '--exclude=gshadow*' '--exclude=ssh_host*' '--exclude=cmdline' '--exclude=crypttab' '--exclude=hostname' '--exclude=localtime' '--exclude=locale*' '--exclude=*lock' '--exclude=.updated' '--exclude=*LOCK' '--exclude=vconsole*' '--exclude=00-keyboard.conf' '--exclude=grub' '--exclude=system.control*' '--exclude=cdi' '--exclude=default.target' /usr/etc/authselect/authselect.conf /etc/authselect/authselect.conf
3a4
> with-fingerprint
diff -r --suppress-common-lines '--color=always' --exclude 'passwd*' --exclude 'group*' '--exclude=subgid*' '--exclude=subuid*' '--exclude=machine-id' '--exclude=adjtime' '--exclude=fstab' '--exclude=system-connections' '--exclude=shadow*' '--exclude=gshadow*' '--exclude=ssh_host*' '--exclude=cmdline' '--exclude=crypttab' '--exclude=hostname' '--exclude=localtime' '--exclude=locale*' '--exclude=*lock' '--exclude=.updated' '--exclude=*LOCK' '--exclude=vconsole*' '--exclude=00-keyboard.conf' '--exclude=grub' '--exclude=system.control*' '--exclude=cdi' '--exclude=default.target' /usr/etc/authselect/dconf-db /etc/authselect/dconf-db
8c8
< enable-fingerprint-authentication=false
---
> enable-fingerprint-authentication=true
diff -r --suppress-common-lines '--color=always' --exclude 'passwd*' --exclude 'group*' '--exclude=subgid*' '--exclude=subuid*' '--exclude=machine-id' '--exclude=adjtime' '--exclude=fstab' '--exclude=system-connections' '--exclude=shadow*' '--exclude=gshadow*' '--exclude=ssh_host*' '--exclude=cmdline' '--exclude=crypttab' '--exclude=hostname' '--exclude=localtime' '--exclude=locale*' '--exclude=*lock' '--exclude=.updated' '--exclude=*LOCK' '--exclude=vconsole*' '--exclude=00-keyboard.conf' '--exclude=grub' '--exclude=system.control*' '--exclude=cdi' '--exclude=default.target' /usr/etc/authselect/fingerprint-auth /etc/authselect/fingerprint-auth
6c6,19
< auth required pam_debug.so auth=authinfo_unavail
---
> auth        required                                     pam_env.so
> auth        [success=done default=bad]                   pam_fprintd.so
> auth        required                                     pam_deny.so
> 
> account     required                                     pam_unix.so
> account     required                                     pam_permit.so
> 
> password    required                                     pam_deny.so
> 
> session     optional                                     pam_keyinit.so revoke
> session     required                                     pam_limits.so
> -session    optional                                     pam_systemd.so
> session     [success=1 default=ignore]                   pam_succeed_if.so service in crond quiet use_uid
> session     required                                     pam_unix.so
diff -r --suppress-common-lines '--color=always' --exclude 'passwd*' --exclude 'group*' '--exclude=subgid*' '--exclude=subuid*' '--exclude=machine-id' '--exclude=adjtime' '--exclude=fstab' '--exclude=system-connections' '--exclude=shadow*' '--exclude=gshadow*' '--exclude=ssh_host*' '--exclude=cmdline' '--exclude=crypttab' '--exclude=hostname' '--exclude=localtime' '--exclude=locale*' '--exclude=*lock' '--exclude=.updated' '--exclude=*LOCK' '--exclude=vconsole*' '--exclude=00-keyboard.conf' '--exclude=grub' '--exclude=system.control*' '--exclude=cdi' '--exclude=default.target' /usr/etc/authselect/system-auth /etc/authselect/system-auth
7a8
> auth        sufficient                                   pam_fprintd.so
Only in /etc: bazzite
Only in /etc: colord
diff -r --suppress-common-lines '--color=always' --exclude 'passwd*' --exclude 'group*' '--exclude=subgid*' '--exclude=subuid*' '--exclude=machine-id' '--exclude=adjtime' '--exclude=fstab' '--exclude=system-connections' '--exclude=shadow*' '--exclude=gshadow*' '--exclude=ssh_host*' '--exclude=cmdline' '--exclude=crypttab' '--exclude=hostname' '--exclude=localtime' '--exclude=locale*' '--exclude=*lock' '--exclude=.updated' '--exclude=*LOCK' '--exclude=vconsole*' '--exclude=00-keyboard.conf' '--exclude=grub' '--exclude=system.control*' '--exclude=cdi' '--exclude=default.target' /usr/etc/containers/policy.json /etc/containers/policy.json
2c2,7
<     "default": [
---
>   "default": [
>     { "type": "insecureAcceptAnything" }
>   ],
>   "transports": {
>     "docker": {
>       "ghcr.io/ublue-os/bazzite": [
4,104c9,11
<             "type": "reject"
<         }
<     ],
<     "transports": {
<         "docker": {
<             "registry.access.redhat.com": [
<                 {
<                     "type": "signedBy",
<                     "keyType": "GPGKeys",
<                     "keyPath": "/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"
<                 }
<             ],
<             "registry.redhat.io": [
<                 {
<                     "type": "signedBy",
<                     "keyType": "GPGKeys",
<                     "keyPath": "/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"
<                 }
<             ],
<             "quay.io/toolbx-images": [
<                 {
<                     "type": "sigstoreSigned",
<                     "keyPath": "/etc/pki/containers/quay.io-toolbx-images.pub",
<                     "signedIdentity": {
<                         "type": "matchRepository"
<                     }
<                 }
<             ],
<             "ghcr.io/ublue-os": [
<                 {
<                     "type": "sigstoreSigned",
<                     "keyPaths": [
<                         "/etc/pki/containers/ublue-os.pub",
<                         "/etc/pki/containers/ublue-os-backup.pub"
<                     ],
<                     "signedIdentity": {
<                         "type": "matchRepository"
<                     }
<                 }
<             ],
<             "": [
<                 {
<                     "type": "insecureAcceptAnything"
<                 }
<             ]
<         },
<         "docker-daemon": {
<             "": [
<                 {
<                     "type": "insecureAcceptAnything"
<                 }
<             ]
<         },
<         "atomic": {
<             "": [
<                 {
<                     "type": "insecureAcceptAnything"
<                 }
<             ]
<         },
<         "containers-storage": {
<             "": [
<                 {
<                     "type": "insecureAcceptAnything"
<                 }
<             ]
<         },
<         "dir": {
<             "": [
<                 {
<                     "type": "insecureAcceptAnything"
<                 }
<             ]
<         },
<         "oci": {
<             "": [
<                 {
<                     "type": "insecureAcceptAnything"
<                 }
<             ]
<         },
<         "oci-archive": {
<             "": [
<                 {
<                     "type": "insecureAcceptAnything"
<                 }
<             ]
<         },
<         "docker-archive": {
<             "": [
<                 {
<                     "type": "insecureAcceptAnything"
<                 }
<             ]
<         },
<         "tarball": {
<             "": [
<                 {
<                     "type": "insecureAcceptAnything"
<                 }
<             ]
---
>           "type": "signedBy",
>           "keyType": "GPGKeys",
>           "keyPath": "/usr/share/ostree/trusted.gpg.d/ublue.gpg"
105a13
>       ]
106a15
>   }
Only in /etc/containers: policy.json.bak
Only in /etc/cups: classes.conf.O
Only in /etc/cups/ppd: Smart_Tank_7000_series.ppd
Only in /etc/cups/ppd: Smart_Tank_7000_series.ppd.O
Only in /etc/cups: printers.conf.O
Only in /etc/cups: subscriptions.conf.O
diff -r --suppress-common-lines '--color=always' --exclude 'passwd*' --exclude 'group*' '--exclude=subgid*' '--exclude=subuid*' '--exclude=machine-id' '--exclude=adjtime' '--exclude=fstab' '--exclude=system-connections' '--exclude=shadow*' '--exclude=gshadow*' '--exclude=ssh_host*' '--exclude=cmdline' '--exclude=crypttab' '--exclude=hostname' '--exclude=localtime' '--exclude=locale*' '--exclude=*lock' '--exclude=.updated' '--exclude=*LOCK' '--exclude=vconsole*' '--exclude=00-keyboard.conf' '--exclude=grub' '--exclude=system.control*' '--exclude=cdi' '--exclude=default.target' /usr/etc/default/waydroid-launcher /etc/default/waydroid-launcher
3,4c3,4