Script to enable Touch ID authentication for sudo commands

setpam.sh

#!/bin/bash

# Script to enable Touch ID authentication for sudo

echo "Current config:"
cat /etc/pam.d/sudo

echo "Press ENTER to continue"
read

echo "# sudo: auth account password session
auth sufficient pam_tid.so
auth sufficient pam_smartcard.so
auth required pam_opendirectory.so
account required pam_permit.so
password required pam_deny.so
session required pam_permit.so" | sudo tee /etc/pam.d/sudo

echo "Done"