From e3d236551782833e5866ed51bfd299b6ae90015f Mon Sep 17 00:00:00 2001
From: Sami Samhuri <sami@samhuri.net>
Date: Mon, 10 Jun 2024 21:15:05 -0700
Subject: [PATCH] Update script to enable TouchID for sudo

---
 enable-sudo-touch-id | 23 ++++++-----------------
 1 file changed, 6 insertions(+), 17 deletions(-)

diff --git a/enable-sudo-touch-id b/enable-sudo-touch-id
index 777c5e0..1370154 100755
--- a/enable-sudo-touch-id
+++ b/enable-sudo-touch-id
@@ -1,20 +1,9 @@
-#!/bin/bash
+#!/bin/zsh
 
-grep -F "pam_tid" /etc/pam.d/sudo >/dev/null
-case $? in
-  0)
+if [[ -e /etc/pam.d/sudo_local ]]; then
     echo "TouchID unlock already in place"
-    ;;
-
-  1)
-    sudo sed -i '' '1a\
-auth       sufficient     pam_tid.so
-    ' /etc/pam.d/sudo
-
+else
+    sudo cp /etc/pam.d/sudo_local.template /etc/pam.d/sudo_local
+    sudo sed -i '' 's/#auth/auth/' /etc/pam.d/sudo_local
     echo "TouchID unlock enabled"
-    ;;
-
-  *)
-    echo "Error trying to read /etc/pam.d/sudo"
-    ;;
-esac
+fi