A PAM module for authentication with Touch ID.
The module takes an optional parameter: "reason".
Its value will be shown in the dialog presented to the user.
If the argument is omitted, generic text is used.
Warning:
Do not procede unless you're 1,000,000% sure what you're doing.
If you're only 999,999% sure, then turn back now.
Installation
- Build the project
- Copy
pam_touchid.so.2to/usr/local/lib/pam/and set:- Permissions: 444
- Owner: root
- Group: wheel
Configuring sudo to use it
- Open up
/etc/pam.d/sudoin your favourite text editor - Add
auth sufficient pam_touchid.so reason="execute a command as another user"to the top of the file
The procedure is pretty much the same for any other process, but you'd edit a different config file and probably change the reason too.
If you get locked out of sudo
- Feel bad that you lied about being 1,000,000% sure what you're doing
- Enable the root user through system preferences and use
suto put the config file back