Created
September 17, 2020 21:43
mac laptop changes for better admin
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#! /usr/bin/env bash | |
# mac laptop changes for better admin | |
# You need to have local admin and be on the VPN | |
# Check this with a successful 'sudo su' | |
# If that command fails, so will this script | |
echo "$USER ALL=(ALL:ALL) ALL" | sudo tee --append /etc/sudoers | |
sudo mkdir -p /Library/Developer/CommandLineTools | |
sudo tee /etc/pam.d/sudo2 > /dev/null <<'EOF' | |
# sudo: auth account password session | |
auth sufficient pam_tid.so | |
auth sufficient pam_smartcard.so | |
auth required pam_opendirectory.so | |
account required pam_permit.so | |
password required pam_deny.so | |
session required pam_permit.so | |
EOF |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment