diff --git a/bootstrap/macOS/main.zsh b/bootstrap/macOS/main.zsh index 2255b41..0f1e20d 100644 --- a/bootstrap/macOS/main.zsh +++ b/bootstrap/macOS/main.zsh @@ -46,6 +46,18 @@ echo "[INFO] Setting up system properties" source $DOTFILES/bootstrap/macOS/plist.zsh +read -p "[ACTION] Do you want to use sudo with touch ID? (Y/n) " -r choice +case "$choice" in + n | N) + : + ;; + *) + # Use `sudo cp` to prevent losing sudo access + sudo cp /etc/pam.d/sudo /etc/pam.d/sudo.bak + sudo cp $DOTFILES/platforms/mac/etc/pam.d/sudo /etc/pam.d/sudo + ;; +esac + echo "[INFO] Installing Homebrew Packages" # Load Brewfile diff --git a/platforms/mac/etc/pam.d/sudo b/platforms/mac/etc/pam.d/sudo new file mode 100644 index 0000000..05215c3 --- /dev/null +++ b/platforms/mac/etc/pam.d/sudo @@ -0,0 +1,9 @@ +# sudo: auth account password session +# Add this line `pam_tid.so` to enable Touch ID for sudo +auth sufficient pam_tid.so +auth include sudo_local +auth sufficient pam_smartcard.so +auth required pam_opendirectory.so +account required pam_permit.so +password required pam_deny.so +session required pam_permit.so