boltgolt/howdy

Require confirmation of recognition

Open

#218 opened on Jun 2, 2019

View on GitHub
 (5 comments) (13 reactions) (0 assignees)Python (4,836 stars) (268 forks)batch import
enhancementhelp wanted

Description

Hi, first of all: many thanks for this little peace of code, great work!

I do currently though have slight security concerns about using it. I do not fear abusive colleagues or me mistyping sudo, but a peace of malware code that tries to execute sudo. Just because I am sitting in front of the laptop does not mean that I want everything that tries to execute with sudo to be executed with sudo.

Is it possible to add a required confirmation before the face recognition is successful? This can be as little as pressing "Enter". So the face get's recognized and then "Enter" has to be pressed to proceed.

This would allow to be sure about what actually uses sudo and what should not.

Contributor guide

Tech stack
pythonshell
Domain
securityauthenticationcli
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
PythonLinux PAMHowdy codebase
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
40
Research direction
Look at the PAM module code in `howdy/src/pam/` to understand the authentication flow. Add a step that waits for an Enter key press after successful face recognition before granting sudo access. Check if there is existing configuration for timeouts or confirmations.
Require confirmation of recognition · boltgolt/howdy#218 | Good First Issue