Activate/Deactivate Touch ID for sudo in Terminal

README.md

Activate/Deactivate Touch ID for sudo in Terminal

Usage

zsh -c "$(curl -sL https://gist.githubusercontent.com/speto/84263183e9d8d17343afcad217269ea7/raw/touch_id_sudo.sh)"

Resources

• Basic activation script https://birkhoff.me/Persistent-sudo-Touch-ID-Authentication-on-macOS/
• Alternative advanced script version https://akrabat.com/add-touchid-authentication-to-sudo/
• Run remote script with sudo https://gist.github.com/speto/89c741391b5283e3071938f4d4d61553
• Read answer from command line https://superuser.com/questions/555874/zsh-read-command-fails-within-bash-function-read1-p-no-coprocess/556006#556006
• Remove line from file https://stackoverflow.com/questions/5410757/how-to-delete-from-a-text-file-all-lines-that-contain-a-specific-string/5410784#5410784

touch_id_sudo.sh

#!/usr/bin/env zsh

case $(grep --silent "pam_tid.so" /etc/pam.d/sudo; echo $?) in
  0)
    echo "TouchID unlock already in place"
    read "answer?Remove TouchID unlock (y/n)?"
    if [[ "$answer" =~ ^[Yy]$ ]]; then
      sudo sed -i '' '/pam_tid\.so/d' /etc/pam.d/sudo
      if [ $? -eq 0 ]; then
        echo "TouchID unlock removed"
        exit 0
      else
        echo "Error trying to remove pam_tid.so from /etc/pam.d/sudo"
        exit 1
      fi
      exit 0
    fi
    ;;
  1)
    sudo sed -i '' '1a\
auth       sufficient     pam_tid.so
    ' /etc/pam.d/sudo

    echo "TouchID unlock enabled"
    exit 0
    ;;
  *)
    echo $?
    echo "Error trying to read /etc/pam.d/sudo"
    exit 1
    ;;
esac