Similar: On Linux, doing something like this doesn't require patched sudo. sudo ...

brazzledazzle · on Oct 31, 2016

If I remember correctly you can use PAM modules on OS X as well. Perhaps writing one and integrating that with the touch ID button might be possible.

pritambaral · on Oct 31, 2016

Oh, then OSX's sudo has little reason to not use PAM. In which case, this project would be better written as a PAM module instead of a sudo fork.

seanp2k2 · on Oct 31, 2016

Guessing so since that's what Yubikey appears to do: https://www.yubico.com/support/knowledge-base/categories/art...

dancek · on Oct 31, 2016

Yep, I've used the Yubikey PAM, and it works just fine. My first thought on seeing the title was: WHYYYYYY?

There are some slight usability issues with using custom PAM config. E.g. if you want to unlock the lock screen without password using the Yubikey, you still need to press enter.

lm2s · on Oct 31, 2016

Yes you can, at least you could 1 or 2 releases ago. I wrote one module and it worked perfectly.

Edit: grammar

reledi · on Oct 31, 2016

Do you have a link?

tomphoolery · on Oct 31, 2016

From the README...

"While not useful in practice, you can use this to verify that the LocalAuthentication code does in fact work."

Almost seems like the author just wrote it to test the LocalAuthentication framework in the real world.

altendo · on Oct 31, 2016

Even better quote:

> While I am using this as a fun experiment on my personal computer, your security needs may vary.

So yes, this is a toy system. Cool concept, but not something you probably want around in production/secure environment, which I assume most people would know not to do.