MacOS Fingerprint in bash
First, open up Terminal. Navigate to the directory where the system stores the list of PAMs by typing cd /etc/pam.d/
and open the sudo
file there in your favorite command-line text editor.
1 (You can also always use a GUI editor like BBEdit too.) Note that if you open it via the command-line, you’ll need to use sudo
itself to do so, since the file is (understandably) protected.
Once you’ve opened it, add the following below the first line (you’ll see the headers under which each of the entries goes):
auth sufficient pam_tid.so
That line basically tells the sudo
command that the Touch ID authentication module is sufficient to authorize the user, which is all you need to do.
Save the file and you’re done! Now, the next time you use the sudo
command, instead of being prompted for your password, you’ll get a dialog box asking you to authenticate with Touch ID, just as you would any other time you needed to authenticate. (And, as an extra bonus, if you choose to click the Enter Password, you’ll get prompted to use either the password or your Apple Watch, if you have one.)