Change to pam.d config file overwritten everytime macOS is updated about pam-watchid HOT 8 OPEN

https://gist.github.com/jspiro/0c9f15b0806aca17b092ef26713adcfe

I run this after updates to re-add TouchID support. I stopped bothering with the watchid support since I got a new computer. You could update the file to support watchid.

from pam-watchid.

Not just this. Any changes to the ulimit and ssh configuration also got reset after each update.

This is a "feature" of macos! 😔️

from pam-watchid.

https://developer.apple.com/forums/thread/14637?answerId=44637022#44637022
Previous reports are that blowing away local pam changes is considered a feature.

from pam-watchid.

i guess we have to add it back in every time?

from pam-watchid.

This doesn't explain why the file is overwritten every time the OS is updated. /etc isn't a protected directory, and I can't see any special attributes set on the folder that indicate anything special about it.

from pam-watchid.

I opened a case with Apple Support, and Engineering and DevSupport are going to get back to me on this

from pam-watchid.

Hear anything back?

from pam-watchid.

Any changes to the ulimit and ssh configuration also got reset after each update.

That's such an awful feature, since it re-enables SSH password authentication on my home server on every update 😠

from pam-watchid.