[apetrovic]

I'm using this to authorize sudo (and other things) with Apple Watch:

https://github.com/insidegui/pam-watchid

... and my /etc/pam.d/sudo needs to be changed like this:

    # sudo: auth account password session
    auth       sufficient     pam_watchid.so
    (...)

This needs to be applied after every system update. Apart of that, it works really well (I have very dry skin so touch ID works for me 50% on a good day)

[inickt]

Guilherme’s stuff is great. pam-watchid is a reimplementation of Apple’s pam_touchid, but uses the other authentication flag which I patch in to the original binary.