How to disable fingerprint request for sudo command on Fedora Linux 35?

Continuing the discussion from How to disable fingerprint request for sudo command?:

The above solution for Fedora-33 does not work for Fedora-35.

Do we have an updated solution?


Hi, from /etc/pam.d we get some symlink file:


All those file pointing to /etc/authselect/ directory.

If we open file /etc/pam.d/sudo, it will give:

auth       include      system-auth
account    include      system-auth
password   include      system-auth
session    optional revoke
session    required
session    include      system-auth

Change it to:

auth       include      password-auth
account    include      password-auth
password   include      password-auth
session    optional revoke
session    required
session    include      password-auth


If we compare /etc/authselect/system-auth and /etc/authselect/password-auth, it will give:

[testcase@fedora authselect]$ diff password-auth system-auth 
> auth        sufficient                         

Means if we choose password-auth it will not use


I have done this change, reboot.
Open terminal, sudo su still prompts for fingerprint.

If using su, please check with /etc/pam.d/su and change accordingly.

Btw, I just typing su if want to switch to root account and no need sudo in my system.

1 Like

The solution provided by @oprizal, that is a simplified and more clean version provided in the other post, works for me.
At this point I would look at logs and other issues in your system.

1 Like

If you have disabled the root account, su does not work. sudo su does.

1 Like

sudo -i
sudo -s

Are other alternatives.

You’re right. I forgot about this. Maybe I add root account during chroot or other events when I can’t boot to my Fedora Workstation.

1 Like

I’ve updated the two topics now with better topic titles. Please remember to think of what the best title for your topic is, to ensure that others looking for information on the forum can also find it quickly. A topic like “this solution does not work on f35” is far too generic :slight_smile: