Source: ubuntu-fido
Section: admin
Priority: optional
Maintainer: Dangerous Things <ops@dangerousthings.com>
Build-Depends:
 debhelper-compat (= 13),
 cargo,
 rustc (>= 1.78),
 libpam0g-dev,
 libgtk-4-dev,
 libadwaita-1-dev,
 libfido2-dev,
 pkg-config
Standards-Version: 4.6.2
Homepage: https://github.com/dangerousthings/ubuntu-fido
Vcs-Browser: https://github.com/dangerousthings/ubuntu-fido
Vcs-Git: https://github.com/dangerousthings/ubuntu-fido.git

Package: ubuntu-fido
Architecture: any
Depends: ubuntu-fido-daemon (= ${binary:Version}),
         ubuntu-fido-pam (= ${binary:Version}),
         ubuntu-fido-cli (= ${binary:Version}),
         ${misc:Depends}
Recommends: ubuntu-fido-gui (= ${binary:Version})
Suggests: ubuntu-fido-gnome-integration
Description: Turnkey FIDO2/U2F/TOTP MFA for Ubuntu (metapackage)
 Installs the full ubuntu-fido stack: daemon, PAM module, CLI, and
 (if recommended) GUI.

Package: ubuntu-fido-daemon
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libpam-u2f, libfido2-1
Description: System daemon for ubuntu-fido MFA management
 Provides the privileged D-Bus service that orchestrates enrollment,
 policy edits, and lockout-prevention checks.

Package: ubuntu-fido-pam
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libpam-runtime
Description: PAM module backstopping ubuntu-fido first-login enrollment
 Refuses authentication when /var/lib/ubuntu-fido/pending/<user> exists
 and the user has not completed first-login MFA setup.

Package: ubuntu-fido-cli
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, ubuntu-fido-daemon
Description: CLI for ubuntu-fido (admin and fleet)
 Configure policy, enroll on behalf of users, generate recovery codes.

Package: ubuntu-fido-gui
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, ubuntu-fido-daemon
Description: GTK4/libadwaita UI for ubuntu-fido
 End-user-facing settings panel for enrollment and policy.