A PAM module for authentication with Touch ID.
The module takes an optional parameter: "reason".
Its value will be shown in the dialog presented to the user.
If the argument is omitted, generic text is used.
Warning :
Do not procede unless you're 1,000,000% sure what you're doing.
If you're only 999,999% sure, then turn back now.
Installation Build the project Copy pam_touchid.so.2 to /usr/local/lib/pam/ and set: Permissions: 444 Owner: root Group: wheel Configuring sudo to use it Open up /etc/pam.d/sudo in your favourite text editor Add auth sufficient pam_touchid.so reason="execute a command as another user" to the top of the fileThe procedure is pretty much the same for any other process, but you'd edit a different config file and probably change the reason too.
If you get locked out of sudo Feel bad that you lied about being 1,000,000% sure what you're doing Enable the root user through system preferences and use su to put the config file back