We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent dd46028 commit 45af7e9Copy full SHA for 45af7e9
1 file changed
pkg/macos-touch-id-sudo/macos-touch-id-sudo.sh
@@ -2,8 +2,16 @@
2
set -euo pipefail
3
4
TouchIDStatus=$(bioutil -rs | grep unlock | awk '{print $4}')
5
-if [[ "${TouchIDStatus}" = "1" ]]; then
6
- sudo sed -i '2 i auth sufficient pam_tid.so' /etc/pam.d/sudo
7
-else
+if [[ "${TouchIDStatus}" != "1" ]]; then
8
echo "Touch ID unavailable, skip setting."
+ exit 0
+fi
9
+
10
+# Check if Touch ID auth is already configured
11
+if ! grep -q "auth.*sufficient.*pam_tid.so" /etc/pam.d/sudo; then
12
+ sudo sed -i '' '2 i\
13
+auth sufficient pam_tid.so' /etc/pam.d/sudo
14
+ echo "Touch ID authentication enabled for sudo."
15
+else
16
+ echo "Touch ID authentication already configured for sudo."
17
fi
0 commit comments