PAM WatchID

A PAM plugin for authenticating using the new kLAPolicyDeviceOwnerAuthenticationWithBiometricsOrWatch API in macOS 10.15, written in Swift.

Installation

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/logicer16/pam-watchid/HEAD/install.sh)" -- enable

$ sudo make install
Edit /etc/pam.d/sudo to include as the first line: auth sufficient pam_watchid.so "reason=execute a command as root"

Note that you might have other auth, don't remove them.