[RESOLU] Paquet pour activer le TouchID avec sudo sous MacOS
Publié : 28 nov. 2024 - 14:09
				
				Bonjour,
Voici le paquet que j'ai fait pour pouvoir valider les demandes sudo avec le TouchID sur MacOS.
Je me suis basé sur cet article : https://www.macg.co/macos/2023/08/macos ... -id-138763
			Voici le paquet que j'ai fait pour pouvoir valider les demandes sudo avec le TouchID sur MacOS.
Je me suis basé sur cet article : https://www.macg.co/macos/2023/08/macos ... -id-138763
Code : Tout sélectionner
# -*- coding: utf-8 -*-
from setuphelpers import *
import re
template_file = r'/etc/pam.d/sudo_local.template'
target_file = r'/etc/pam.d/sudo_local'
enabled_pattern = r'^auth\ *sufficient\ *pam\_tid\.so$'
disabled_pattern = r'^#auth\ *sufficient\ *pam\_tid\.so$'
def is_sudo_tid_enabled():
    if not isfile(target_file):
        error(r'File %s does  not exists !' % target_file)
    else:
        with open(target_file) as f:
            for line in f:
                if re.match(enabled_pattern, line):
                    return True
                elif re.match(disabled_pattern, line):
                    return False
    return "NOTMATCHING"
def enable_sudo_tid():
    file_to_rewrite = []
    with open(target_file) as f:
        for line in f:
            if re.match(disabled_pattern, line):
                file_to_rewrite.append(line[1:])
            else:
                file_to_rewrite.append(line)
    with open(target_file, r'w') as f:
        f.writelines(file_to_rewrite)
def disable_sudo_tid():
    file_to_rewrite = []
    with open(target_file) as f:
        for line in f:
            if re.match(enabled_pattern, line):
                file_to_rewrite.append(r'#' + line)
            else:
                file_to_rewrite.append(line)
    with open(target_file, r'w') as f:
        f.writelines(file_to_rewrite)
def install():
    if not isfile(target_file):
        filecopyto(template_file, target_file)
    # Check if already enabled
    check = is_sudo_tid_enabled()
    if check == r'NOTMATCHING':
        error(r'Error matching pattern in %s file' % target_file)
    else:
        if check:
            print(r'TouchID support for sudo is already enabled.')
        else:
            print(r'Enabling TouchID support for sudo...')
            enable_sudo_tid()
def uninstall():
    print(r'Disabling TouchID support for sudo...')
    disable_sudo_tid()