The `LocalAuthentication` framework this project mentions sounds like an OS X equivalent of PAM — an OS level account auth framework. I wonder why/if the `sudo` on OS X doesn't use it.
The `LocalAuthentication` framework this project mentions sounds like an OS X equivalent of PAM — an OS level account auth framework. I wonder why/if the `sudo` on OS X doesn't use it.
Edit: grammar
There are some slight usability issues with using custom PAM config. E.g. if you want to unlock the lock screen without password using the Yubikey, you still need to press enter.
"While not useful in practice, you can use this to verify that the LocalAuthentication code does in fact work."
Almost seems like the author just wrote it to test the LocalAuthentication framework in the real world.
> While I am using this as a fun experiment on my personal computer, your security needs may vary.
So yes, this is a toy system. Cool concept, but not something you probably want around in production/secure environment, which I assume most people would know not to do.