[fprint] libfprint suggestions

[Diego Zuccato]

Mehmet Ali Akmanalp ha scritto:
>     and print templates have not to reside
>     in (low-security) users' home dir. 
> I agree with this only somewhat. How do you expect a user process to 
> write to root-protected areas? Every distro has a different security 
> scheme, so I think it should be up to the programmer to properly 
> delegate the process of saving the data securely. You can easily get the 
> data and write it out yourself, which is what I did.
Well, this SCREAMS for "plugins" :-)
A db storage backend doesn't need root access, it only needs proper auth 
to connect to the db. A filesystem-based storage backend *could* need 
root access (think about ACLs, that can even limit root's access or give 
users more privileges on certain objects). But that's better to left at 
the distro packager (or root) the ruling. Some storage backends could 
even require a (possibly remote) daemon to be running...

What I find quite limiting, now, is that there's no way to bypass saving 
in user's home the enrollement info (w/o modifying libfprint).

BYtE,
  Diego.