mac laptop changes for better admin

local_admin.sh

#! /usr/bin/env bash

# mac laptop changes for better admin
# You need to have local admin and be on the VPN

# Check this with a successful 'sudo su'
# If that command fails, so will this script

echo "$USER  ALL=(ALL:ALL) ALL" | sudo tee --append /etc/sudoers
sudo mkdir -p /Library/Developer/CommandLineTools

sudo tee /etc/pam.d/sudo2 > /dev/null <<'EOF'
# sudo: auth account password session
auth       sufficient     pam_tid.so
auth       sufficient     pam_smartcard.so
auth       required       pam_opendirectory.so
account    required       pam_permit.so
password   required       pam_deny.so
session    required       pam_permit.so
EOF