{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreiamxzqcgdotrx7scovvjdhugo4tmegdt24ll5okm5o7i2x7zsqahe",
    "uri": "at://did:plc:7hlv3lfbqjlz733k7coc6blt/app.bsky.feed.post/3mnpmx36gqa2j"
  },
  "canonicalUrl": "https://thde.io/blog/touchid-sudo/index",
  "description": "A persistent, update-safe way to authenticate sudo with your fingerprint.",
  "path": "/blog/touchid-sudo/index",
  "publishedAt": "2026-06-07T00:00:00.000Z",
  "site": "at://did:plc:7hlv3lfbqjlz733k7coc6blt/site.standard.publication/3mnphgnfq742p",
  "textContent": "Since macOS Sonoma, there is an official way to enable Touch ID for sudo that survives OS updates via /etc/pam.d/sudo_local.\n\nRun this single command to apply it:\n\nThis copies the system-provided template and uncomments the pam_tid.so line in one step. The resulting file looks like:\n\nOpen a new terminal and sudo will prompt for Touch ID.\n\n<img src=\"touchid-sudo.png\" alt=\"Touch ID sudo prompt\" width=\"320\">",
  "title": "Enable Touch ID for sudo on macOS"
}