dotfiles/tools/mac/etc/pam.d/sudo
2025-09-27 16:00:34 +01:00

9 lines
377 B
Text

# sudo: auth account password session
# Add this line `pam_tid.so` to enable Touch ID for sudo
auth sufficient pam_tid.so
auth include sudo_local
auth sufficient pam_smartcard.so
auth required pam_opendirectory.so
account required pam_permit.so
password required pam_deny.so
session required pam_permit.so