A simple tool to add Touch ID to sudo

fixSudoTouchID.tool

# Write the new file
awk 'NR==2 {print "auth       sufficient     pam_tid.so"} 1' /etc/pam.d/sudo > /etc/pam.d/sudo.new
# Make a backup of the current file
cp /etc/pam.d/sudo /etc/pam.d/sudo.bak
# Replace the current file with the new file
mv /etc/pam.d/sudo.new /etc/pam.d/sudo

# If you need to restore the backup and do not have
# access to sudo due to the issue. Reboot into recoveryOS
# Mount your data volume
# Open the terminal and cd to
# /Volumes/<data volume>/private/etc/pam.d
# mv sudo.bak sudo

One would think by now with macOS 11 Big Sur that wouldn't be needed

One would think Big Sur isn't needed ;-)

I'll bookmark this thread and I'll play with Touch ID and other PAM methods that Big Sur supports on my M1 mini when I'm next out of things to do 💯