Use TouchID to Authenticate Sudo on macOS

Re:Use TouchID to Authenticate Sudo on macOS by makeworld on Friday August 26, 2022 @03:28PM (#32611706)

I've also done this on my Framework laptop running Linux, it's really convenient. Have it set up for sudo, user login, etc. Just added this to various files in /etc/pam.d

  auth sufficient pam_fprintd.so

[ Parent | on HN ]

Re:Use TouchID to Authenticate Sudo on macOS by danieldk on Friday August 26, 2022 @04:27PM (#32612370)

I tried this just over a year ago, but it is quite flakey. IIRC because of how PAM works, you have to wait until this PAM module times out before you can switch to another form of authentication. (E.g. because fingerprint authentication fails.)

[ Parent | on HN ]

Re:Use TouchID to Authenticate Sudo on macOS by dna_polymerase on Friday August 26, 2022 @03:47PM (#32611921)

Lol, just learned my laptop has a fingerprint reader.

[ Parent | on HN ]

Re:Use TouchID to Authenticate Sudo on macOS by kitsunesoba on Friday August 26, 2022 @03:39PM (#32611837)

On my ThinkPad X1 Nano, GNOME under Fedora 35 and 36 offer the ability to use the fingerprint sensor for login and sudo in the Settings app. Pretty nice.

[ Parent | on HN ]

Re:Use TouchID to Authenticate Sudo on macOS by ConfuSomu on Saturday August 27, 2022 @12:42AM (#32615777)

This nicely did the trick! Adding the line at the top of /etc/pam.d/system-auth makes sudo authenticate use the fingerprint, which is nicer than always typing my password and gives a streamlined experience between SDDM and sudo.

[ Parent | on HN ]