Just got a new computer again (new job) and realized I need to reconfigure sudo to work with touch-id. I then realized I didn’t have touch-id enabled for sudo in a long time, the reason is that every OS update it resets the config. Today when enabling it, I have realized that there’s a file called /etc/pam.d/sudo_local.template which does exactly that.

sudo_local is a filed that will not be overwritten when upgrading between OS versions.

sudo cp /etc/pam.d/{sudo_local.template,sudo_local}

# Edit the file and uncomment this line!
auth       sufficient     pam_tid.so