From 217716ef90eef830eed5dfb121ed3533cdc93843 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marco=20Trevisan=20=28Trevi=C3=B1o=29?= <mail@3v1n0.net>
Date: Fri, 9 Mar 2018 14:53:42 +0100
Subject: [PATCH] device policy: only allow enroll for authenticated users

Ensure a password prompt is shown when enrolling, and fingerprint
management is requested.
---
 data/net.reactivated.fprint.device.policy.in | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/data/net.reactivated.fprint.device.policy.in b/data/net.reactivated.fprint.device.policy.in
index a564929..de11832 100644
--- a/data/net.reactivated.fprint.device.policy.in
+++ b/data/net.reactivated.fprint.device.policy.in
@@ -25,7 +25,7 @@
     <defaults>
       <allow_any>no</allow_any>
       <allow_inactive>no</allow_inactive>
-      <allow_active>yes</allow_active>
+      <allow_active>auth_self_keep</allow_active>
     </defaults>
   </action>
 
-- 
2.7.4