pam-facial-auth
A pluggable authentication module that relies on facial recognition to verify the user attempting to gain access. Looks for a match between username and label associated with the recognized face.
Please don't use facial recognition as a serious form of authentication. This was literally written to be exploited in a CTF
Requirements
- OpenCV 3.0+ including extra modules (opencv_contrib)
- PAM development packages (libpam0g and libpam0g-dev on ubuntu)
- dirent.h available in PATH (already installed on ubuntu)
Quickstart
Clone this repository
git clone https://github.com/devinaconley/pam-facial-auth.git
Build and install facial auth module
chmod +x setup.sh
./setup.sh
Train facial recognition model
./run_training [data_dir] [algorithm (optional) haar_cascade(optional)]
Where the data directory is expected to be of the following structure
data_dir/
-- username1/
---- image1
---- image2
---- ...
---- imageN
-- username2/
...
Configure facial auth settings in config. Setting imageCapture to false will mean the module passively listens for a stream of images being written to imageDir (for example by motionEye - https://github.com/ccrisan/motioneye/wiki)
imageCapture=true
imageDir=/var/lib/motioneye/Camera1
timeout=10
threshold=1000.00
Install the config and model files to etc/pam-facial-auth/
chmod +x configure.sh
./configure.sh
Run test application
./run_test
Credit
h/t to https://github.com/beatgammit/simple-pam for starting template