Path: csiph.com!eternal-september.org!feeder.eternal-september.org!reader02.eternal-september.org!kreme.dont-email.me!.POSTED!not-for-mail From: Lewis Newsgroups: comp.sys.mac.system Subject: Re: Got an Apple Watch? Got a Mac? Got Sudo? Date: Fri, 20 Nov 2020 17:37:01 -0000 (UTC) Organization: Miskatonic U Lines: 33 Message-ID: References: Reply-To: g.kreme@gmail.don-t-email-me.com Injection-Date: Fri, 20 Nov 2020 17:37:01 -0000 (UTC) Injection-Info: kreme.dont-email.me; posting-host="95dd4d2ab06379bceb2866dd54cece70"; logging-data="19426"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/pftXIflCApNGmbwkNLMR9" User-Agent: slrn/1.0.3 (Darwin) Cancel-Lock: sha1:7ugpXoB9ex2eeWMmHv7l++RxjwY= X-Face: )^b5"R:T7U>9~:PEn3YkzMfW*[b1qKeU.fP9C8~8HpU9}lA&6`bH1z X-Clacks-Overhead: GNU Terry Pratchett Mail-Copies-To: nobody Xref: csiph.com comp.sys.mac.system:135082 In message Alan Browne wrote: > On 2020-11-20 11:30, Lewis wrote: >> use your watch to authorize sudo: >> >> >> works a treat, minimal command-line fu needed. >> >> git clone https://github.com/biscuitehh/pam-watchid >> cd pam-watchid >> more README.md > Neat. I don't have an Apple watch, alas, and my SO thinks sudo is > martial arts practiced by people who lisp. > The premise is what? Your watch gets auth from your iPhone which is > auth'd by fingerprint or FaceID? If you have an Apple Watch many authorizations from you mac can be confirmed by tapping oyur watch's side button instead of typing in your password. Things like unlocking System preferences, deleting apps from the Application folder, etc. This adds invoking sudo from the command line to that list. (If you have a touchID Mac, there is a similar process to enable sudo on those, but it does not require downloading anything, simply editing the /etc/pam/sudo file, IIRC. I don't have a touchID mac, so I've not looked into it.) -- YOU [humans] NEED TO BELIEVE IN THINGS THAT AREN'T TRUE. HOW ELSE CAN THEY BECOME? --Hogfather