MacOS Fingerprint in bash
First, open up Terminal. Navigate to the directory where the system
stores the list of PAMs by typing cd /etc/pam.d/ and open
the sudo file there in your favorite command-line text
editor.
1 (You can also always use a GUI editor like BBEdit too.) Note that
if you open it via the command-line, you’ll need to
use sudo itself to do so, since the file is
(understandably) protected.
Once you’ve opened it, add the following below the first line (you’ll see the headers under which each of the entries goes):
auth sufficient pam_tid.so
That line basically tells the sudo command that the
Touch ID authentication module is sufficient to authorize the user,
which is all you need to do.
Save the file and you’re done! Now, the next time you use
the sudo command, instead of being prompted for your
password, you’ll get a dialog box asking you to authenticate with Touch
ID, just as you would any other time you needed to authenticate. (And,
as an extra bonus, if you choose to click the Enter Password, you’ll get
prompted to use either the password or your Apple Watch, if you
have one.)