feat(macOS): Use sudo with touch ID

bootstrap/macOS/main.zsh

@@ -46,6 +46,18 @@ echo "[INFO] Setting up system properties"
 
 source $DOTFILES/bootstrap/macOS/plist.zsh
 
+read -p "[ACTION] Do you want to use sudo with touch ID? (Y/n) " -r choice
+case "$choice" in
+  n | N)
+    :
+    ;;
+  *)
+    # Use `sudo cp` to prevent losing sudo access
+    sudo cp /etc/pam.d/sudo /etc/pam.d/sudo.bak
+    sudo cp $DOTFILES/platforms/mac/etc/pam.d/sudo /etc/pam.d/sudo
+    ;;
+esac
+
 echo "[INFO] Installing Homebrew Packages"
 
 # Load Brewfile

platforms/mac/etc/pam.d/sudo

@@ -0,0 +1,9 @@
+# sudo: auth account password session
+# Add this line `pam_tid.so` to enable Touch ID for sudo
+auth       sufficient     pam_tid.so
+auth       include        sudo_local
+auth       sufficient     pam_smartcard.so
+auth       required       pam_opendirectory.so
+account    required       pam_permit.so
+password   required       pam_deny.so
+session    required       pam_permit.so