PulsarKey v1.3.0: Security Profiles, Audit Journal & Backup Key Assistant

PulsarKey v1.3.0 Release Notes

🛡️ What's New:

• Security Strictness Profiles:

  • Convenience (1FA): Biometric fingerprint touch alone unlocks greeter, sudo, and polkit with password fallback.
  • Fortress (True 2FA): Strictly enforces user password AND physical YubiKey touch.
  • Lockdown: Hardware token strictly mandatory with zero password fallback.
  • Safe PAM file generation with automatic rollback backups (.pulsarkey.bak).
  • Switch via CLI (pulsarkey profile) or directly from the COSMIC panel applet.

• Authentication Audit Journal (Recent Pulses):

  • Real-time logging of authentication and hardware insertion/removal pulses to ~/.config/pulsarkey/audit.log.
  • Dynamic system auth log aggregation from journalctl with a formatted CLI viewer (pulsarkey audit).
  • Integrated tray submenu showing the 5 most recent pulses and 1-click journal inspector.

• Backup Key Sync & Recovery Assistant:

  • Automatically parses /etc/yubico/u2f_keys for hardware redundancy health.
  • Interactive pairing wizard (sudo pulsarkey backup pair) to enroll secondary keys safely without overwriting primary credentials.
  • Verification testing and backup resident SSH key generation.

• COSMIC Panel Applet Enhancements:

  • Low-overhead sysfs hardware detection eliminating polling latency and hidraw lock contention.
  • Direct menu controls for Security Profiles, Recent Pulses, and Backup Assistant.

📦 Installation:

sudo apt install ./pulsarkey_1.3.0_amd64.deb

What's Changed

• feat: Security Profiles, Audit Journal, and Backup Key Assistant (v1.3.0) by @mzia in #2

Full Changelog: v1.2.0...v1.3.0