On Thu, Nov 19, 2009 at 08:31:08AM -0600, Chris Adams wrote:
Once upon a time, Richard Hughes <hughsient(a)gmail.com> said:
> If you're not shipping custom PolicyKit rules then at the moment
> normal users can, without authentication:
> * Enroll new fingerprints
That's along the lines of "change their password", which is reasonable
(unless this is giving elevated access to those fingerprints).
Actually, that's a problem, because it doesn't require authentication.
passwd requires that you enter your current password first, for good
reason.