From d6955bf749aa7cc0aaa8c3d39626ba54c2eb9026 Mon Sep 17 00:00:00 2001
From: Zoe Roux <zoe.roux@zoriya.dev>
Date: Wed, 18 Jun 2025 17:53:38 +0200
Subject: [PATCH] Enable sudo via fingerprint

---
 lib/mksystem.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/lib/mksystem.nix b/lib/mksystem.nix
index e2480ce..c3c39a5 100644
--- a/lib/mksystem.nix
+++ b/lib/mksystem.nix
@@ -123,6 +123,13 @@ in
       ]
       ++ nixpkgs.lib.optionals darwin [
         inputs.nix-index-database.darwinModules.nix-index
+        {
+          # auth sudo via fingerprint
+          security.pam.services.sudo_local = {
+            reattach = true;
+            touchIdAuth = true;
+          };
+        }
       ]
       ++ custom;
   }