Skip to content

greeter: Make Password fail delay configurable

Tino Lorenz requested to merge tilorenz/kscreenlocker:pwFailDelay into master

The hardcoded 3s delay after mistyping your password is annoying and, if you have a reasonably secure password and/or enabled PAM's faillock, rather pointless.

For now, this just makes the delay configurable, the default is left at 3s.

I initially looked into using PAM's fail delay for this, but unfortunately, the PAM config is ill-suited for modifying it from a GUI tool:

  • Multiple config files can be cascaded, e.g. on Arch, there's kde < system-local-login < system-login < system-auth. But that is just one example, this can be freely configured by the distro / user.
  • A module can be included multiple times, and in case of the fail delay, PAM will use the highest (rather than the latest) value. So we can't just set the value we want in PAM's kde config file
  • Other modules besides pam_faildelay can also set such a delay; pam_unix and pam_faillock set a delay of 2s by default

BUG: 489898

Merge request reports