Always unlocks with no checks

[alba4k]

I've put the following in /etc/pam.d/sudo on arch

auth sufficient libpam_any.so { "mode": "One", "modules": { "login": "Password", "pam_howdy": "Face Recognition", "pam_fprintd": "Fingerprint" } }

auth		include		system-auth
account		include		system-auth
password	include		system-auth

And it looks like it's always just unlocking without checking either of those three options, immediately. Any idea of what could be causing this?

[alba4k]

Looked into pam-random

What I put there as modules were the names of the files in /lib/security, removing .so from them. Do i need to create separate files in /etc/pam.d instead, that only have a single auth sufficient followed by the .so file I want to use with them?

[alba4k]

Nope, that does not seem to be the issue. Only having the following also causes sudo to run withotu checking anything

[ChocolateLoverRaj]

Does this happen with pamtester sudo $USER authenticate?

[alba4k]

Yep it does

pamtester: succesfully authenticated

[alba4k]

@ChocolateLoverRaj ever got a chance to look into this?

[ChocolateLoverRaj]

Sorry, I forgot about this. I'm currently working on something else. I don't personally use this. I might look into this later. If you or anyone else wants to investigate this feel free to do so since there is a very small amount of code.