persistent-touch-id-sudo

I'm leery of configuring user code to automatically modify system files, especially security related ones. I think your tool should at least have an option to ask user confirmation, perhaps showing the expected file diff, before making its change. https://github.com/YuriyGuts/persistent-touch-id-sudo/issues... System updates are not frequent. I prefer doing it manually, and just automating a notification that it needs to be redone. I added this to my `.bashrc`: if ! grep -q "pam_tid.so" /etc/pam.d/sudo ; then echo "touch ID no longer enabled for sudo. Insert the following line as line 2 in /etc/pam.d/sudo:" echo " auth sufficient pam_tid.so # enables touch id auth for sudo" fi

I love using sudo with Touch ID and have been using this trick for years. The only inconvenience is that the PAM configuration always gets reverted by OS updates. I wrote a small tool to mitigate this by configuring PAM on system startup: https://github.com/YuriyGuts/persistent-touch-id-sudo