# Developed and tested by under the MIT license on macOS Big Sur 11.2. # Use the rollback to restore password protection # Type the password last time to apply the new mode and forget it for any console task for ages # Enable nopasswd mode for sudo on macOS from the userspace in fast and totally non-interactive way Type your sudo password one last time to let the script to process.Copy the following command, paste it to command line and launch.Run command csrutil authenticated-root enable csrutil enable reboot If you want to check for passwordless users, after cansudo0, add an if to check if (SUDOASKPASS/bin/false sudo -A whoami 2>&1) equals to root, this will also make it work in the sudo timeout.When nopasswd mode for sudo will be enabled, you can turn SIP back on Steps to enable SIP To check current status of SIP, open Terminal.app and run csrutil authenticated-root status csrutil status. Run command csrutil authenticated-root disable csrutil disable reboot.Launch Utilities > Terminal from the menu bar.Boot into recovery mode, holding down ⌘ and R keys while starting up your computer.If your hard drive is encrypted, you have to decrypt it first and disable FileVault.Most likely you will need to disable macOS System Integrity Protection before using this script (or applying any other changes to system files), otherwise active SIP won't let you to modify system files under /private/etc/ folder owned by root:wheel Steps to disable SIP Setup routine also requires wget utility to retrieve the script from Github Gist MacOS SIP is disabled (since OS X El Capitan 10.11)ĭepends on coreutils sudo, visudo, mkdir, rm, chmod, grep, cat, grep, wc, Includes various checks to avoid conflicts with existing configurationĭesigned and tested with GNU bash 3.2.57(1)-release on macOS Big Sur 11.2.0.Implements silent autofixes for missing settings and environment.Apple Pay: Use Touch ID to complete purchases you make on this. Enables nopasswd mode in 0.14769983291626 sec I pretty much stole it from here: Is it possible to give sudo access to only a particular command sudo visudo -f /etc/sudoers.d/Username And add that to the file: Username ALL NOPASSWD: /usr/bin/apt update Username ALL NOPASSWD: /usr/bin/apt install Don't know how to make this a one-liner, though. Set up Touch ID Unlock your Mac: Use Touch ID to unlock this Mac when you wake it from sleep.With or without this script, you realize the risks and on your own take the whole responsibility for any claims,ĭamages or other liability, arising from, in connection with or out of access from your userspace to the sudoĬommand without password protection on your macOS Features That you are acting as a person aware of the possible consequences. Althrough NOPASSWD doesn't have a major impact on security, it needs to be clarified and clearly stated

Give yourself passwordless sudo on os x