Skip to content

Latest commit

 

History

History
13 lines (9 loc) · 493 Bytes

README.md

File metadata and controls

13 lines (9 loc) · 493 Bytes

PAM WatchID

A PAM plugin for authenticating using the new kLAPolicyDeviceOwnerAuthenticationWithBiometricsOrWatch API in macOS 12, written in Swift. Updated to be an universal binary (ARM/Apple Silicon version untested)

Installation

  1. $ sudo make install
  2. Edit /etc/pam.d/sudo to include as the first line: auth sufficient pam_watchid.so "reason=execute a command as root"

Note that you might have other auth, don't remove them.