steveej/infra
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

graphical-systems: disable pcscd

Browse source 
Also add udev rule to allow users device access. This is required for
users accessing the Yubikey directly which is the case when using gpg
without pcscd
This commit is contained in:
steveej 2020-12-21 16:47:00 +01:00
parent be985e63b2
commit b215e8280d
3 changed files with 7 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
nix/os/profiles/graphical/system.nix
View file

@ -20,7 +20,7 @@
# hardware related services
services.illum.enable = true;
services.pcscd.enable = true;
services.pcscd.enable = false;
hardware = {
bluetooth.enable = true;
pulseaudio = {
@ -109,6 +109,9 @@
SUBSYSTEM=="usb", ATTR{idVendor}=="047f", ATTR{idProduct}=="011a", GROUP="users", MODE="0777"
SUBSYSTEM=="usb", ATTR{idVendor}=="047f", ATTR{idProduct}=="fffe", GROUP="users", MODE="0777"
SUBSYSTEM=="usb", ATTR{idVendor}=="047f", ATTR{idProduct}=="0001", GROUP="users", MODE="0777"
# Yubikey 4/5 U2F+CCID
SUBSYSTEM=="usb", ATTR{idVendor}=="1050", ATTR{idProduct}=="0406", ENV{ID_SECURITY_TOKEN}="1", GROUP="wheel"
'';