https://alexej.disterhoft.de/tags/sonoma/Recent content in Sonoma on alexej.disterhoft.deHugoenAlexej DisterhoftSat, 04 Apr 2026 00:00:00 +0200https://alexej.disterhoft.de/posts/sudo-touch-id-macos/Tue, 26 Dec 2023 00:00:00 +0100https://alexej.disterhoft.de/posts/sudo-touch-id-macos/<p>On macOS Sonoma and newer, <code>sudo</code> still defaults to password authentication. If your Mac has Touch ID, you can enable fingerprint approval with a local PAM config that persists across updates.</p> <h2 id="enable-touch-id-for-sudo"> <a class="heading-anchor" href="#enable-touch-id-for-sudo" aria-label="Link to this section" title="Link to this section" > <span aria-hidden="true">#</span> </a> Enable Touch ID for sudo </h2> <ol> <li> <p>Open <code>/etc/pam.d</code> and confirm the template file exists.</p> <div class="code-block" data-collapsed-default="false"> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-shell-session" data-lang="shell-session"><span class="line"><span class="cl"><span class="gp">$</span> <span class="nb">cd</span> /etc/pam.d </span></span><span class="line"><span class="cl"><span class="gp">$</span> ls -l sudo* </span></span><span class="line"><span class="cl"><span class="go">.r--r--r-- 283 root 16 Sep 15:28 sudo </span></span></span><span class="line"><span class="cl"><span class="go">.r--r--r-- 179 root 16 Sep 15:28 sudo_local.template </span></span></span></code></pre></div> </div> </li> <li> <p>Create <code>sudo_local</code> from the template.</p>