From 64e9dd749b1c47fcad39bc8e2f15e9925493388b Mon Sep 17 00:00:00 2001
From: William Brown <firstyear@redhat.com>
Date: Nov 13 2017 00:33:22 +0000
Subject: Enable support for pcscd "out of box"


By default opensc and pcsc were not enabled. These need to be
installed and enabled for PIV smartcard authentication to work
with IPA or others. pcscd.socket is a dynamically activated
local server, so safe to activate by default as it will only run
when a CCID device is present.

---

diff --git a/fedora-ostree-workstation.json b/fedora-ostree-workstation.json
index ee25f3b..f57f2d0 100644
--- a/fedora-ostree-workstation.json
+++ b/fedora-ostree-workstation.json
@@ -293,6 +293,7 @@
 		"nss-softokn-freebl",
 		"numad",
 		"opencc",
+		"opensc",
 		"openssh-clients",
 		"openssh-server",
 		"orca",
@@ -305,6 +306,7 @@
 		"passwdqc",
 		"passwdqc-lib",
 		"pciutils",
+		"pcsc-lite",
 		"pinfo",
 		"plymouth",
 		"plymouth-plugin-label",
@@ -432,6 +434,8 @@
 
     "default_target": "graphical.target",
 
+    "units" : ["pcscd.socket"]
+
     "comment-for-packages": "Keep this in sync with fedora-atomic-host.json from fedora-atomic",
     "packages-aarch64": ["grub2-efi", "ostree-grub2", "efibootmgr", "shim"],
     "packages-armhfp": ["extlinux-bootloader"],