A PAM plugin for authenticating using the new kLAPolicyDeviceOwnerAuthenticationWithBiometricsOrWatch API in macOS 10.15, written in Swift.
This version works with macOS Monterey on Intel and Apple Silicon.
Makefile from https://github.com/Reflejo/pam-touchID/blob/master/Makefile added to Swift code from https://github.com/biscuitehh/pam-watchid/blob/main/watchid-pam-extension.swift
$ sudo make install
- Edit
/etc/pam.d/sudo
to include as the first line:auth sufficient pam_watchid.so.3 "reason=execute a command as root"
Note that you might have other auth
, don't remove them.