Skip to content

v0.3.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Jun 15:56
v0.3.0
de645eb

New check: TouchID for sudo

Most Macs already use TouchID for login, Apple Pay, and app installs — but not for sudo in Terminal. Apple ships the fix commented out at /etc/pam.d/sudo_local.template. Almost nobody enables it.

fort now checks if you have it on, and fixes it in one command.

  • New check sudo_touchid: detects whether PAM is configured to accept TouchID for sudo
  • fort --fix writes /etc/pam.d/sudo_local — your password still works as a fallback
  • Maps to SOC 2 CC6.1 / CC6.3, ISO 27001 A.5.17, NIST CSF PR.AC-7, CIS v8 6.3
  • 16 checks total
Assets 4
Loading