artginzburg / sudo-touchid

 Permanent TouchID support 👆 for `sudo`.
https://git.io/sudotouchid
Eclipse Public License 2.0
512 stars 13 forks source link

Don't works with Sonoma #19

Open misterbuchi opened 9 months ago

misterbuchi commented 9 months ago

Hi,

Thanks for your work. on my device, your great program doesn't works anymore. I am on a apple silicon mac. and i have done the install with homebrew.

ORBAT commented 8 months ago

I also ran into problems sudo-touchid and Sonoma, but turns out it's not necessary on Sonoma anymore and Touch ID for sudo can be made to survive OS updates like this:

artk42 commented 4 months ago

I also ran into problems sudo-touchid and Sonoma, but turns out it's not necessary on Sonoma anymore and Touch ID for sudo can be made to survive OS updates like this:

  • open terminal
  • cd /etc/pam.d
  • copy the provided template to the actual file pam will read with sudo cp sudo_local.template sudo_local
  • edit the file with sudo pico sudo_local (or whatever editor you prefer)
  • remove the # from the start of the line with auth sufficient pam_tid.so
  • Save file (for Pico it's Ctrl-X, type Y, hit enter)
  • you're done!

Both sudo-touchid stopped working for me and proposed above way also doesn't work , tried reboots/brew reinstalls - always ask for password. No idea...

> sudo echo "check tid"
Password:
sudo: a password is required

> cat /etc/pam.d/sudo_local
# sudo_local: local config file which survives system update and is included for sudo
# uncomment following line to enable Touch ID for sudo
auth       sufficient     pam_tid.so
artk42 commented 4 months ago

I also ran into problems sudo-touchid and Sonoma, but turns out it's not necessary on Sonoma anymore and Touch ID for sudo can be made to survive OS updates like this:

  • open terminal
  • cd /etc/pam.d
  • copy the provided template to the actual file pam will read with sudo cp sudo_local.template sudo_local
  • edit the file with sudo pico sudo_local (or whatever editor you prefer)
  • remove the # from the start of the line with auth sufficient pam_tid.so
  • Save file (for Pico it's Ctrl-X, type Y, hit enter)
  • you're done!

Both sudo-touchid stopped working for me and proposed above way also doesn't work , tried reboots/brew reinstalls - always ask for password. No idea...

> sudo echo "check tid"
Password:
sudo: a password is required

> cat /etc/pam.d/sudo_local
# sudo_local: local config file which survives system update and is included for sudo
# uncomment following line to enable Touch ID for sudo
auth       sufficient     pam_tid.so

Ok, I've occasionally found out the issue! Unlock with Apple Watch was turned on and overriding with password request (that is useless, but was sitting on silently). So that when sudo-touchid sterilized itself, then watch unlock became prioritized and thus everything stopped working for me. So, as a rule of thumb: Turn off "Unlock with Apple Watch"