PAM Configuration

Generic

add this line before auth required pam_unix.so

auth   sufficient   pam_redface.so

Archlinux

GDM

If you use gnome keyring, you should login using your password to unlock the keyring. You can still use face recognition for unlocking the screen.

To enable face recognition for unlocking screen, open /etc/pam.d/gdm-password and insert pam_redface before including system-local-login.

auth   sufficient   pam_redface.so ifexist=/run/user/{{.Uid}}/keyring/control
auth     include   system-local-login
...

sudo

/etc/pam.d/sudo contents:

#%PAM-1.0
auth   sufficient   pam_redface.so
auth		include		system-auth
account		include		system-auth
session		include		system-auth

polkit

/etc/pam.d/polkit-1 contents:

#%PAM-1.0
auth   sufficient   pam_redface.so
auth       include      system-auth
account    include      system-auth
password   include      system-auth
session    include      system-auth