if ! grep -q "pam_tid.so" /etc/pam.d/sudo ; then echo "touch ID no longer enabled for sudo. Insert the following line as line 2 in /etc/pam.d/sudo:" echo " auth sufficient pam_tid.so # enables touch id auth for sudo" fi