Enable Touch ID for sudo on macOS

Since macOS Sonoma, there is an official way to enable Touch ID for sudo that survives OS updates via /etc/pam.d/sudo_local.

Run this single command to apply it:

This copies the system-provided template and uncomments the pam_tid.so line in one step. The resulting file looks like:

Open a new terminal and sudo will prompt for Touch ID.