Let's sudo by face recognition of Windows Hello on Windows Subsystem for Linux (WSL). It runs on both WSL 1 and WSL 2. This is a PAM module for Linux on WSL.
Then you can call sudo pam-auth-update and select the entry from the checkbox list. The resulting file will include the required PAM config entries without creating any conflicts with other authentication methods.
Perhaps it would make sense to include that file in the install script?
On Ubuntu, you can easily include the required pam settings by creating the following file:
/usr/share/pam-configs/wsl-hello-sudo
Then you can call
sudo pam-auth-update
and select the entry from the checkbox list. The resulting file will include the required PAM config entries without creating any conflicts with other authentication methods.Perhaps it would make sense to include that file in the install script?