Generic app for mobile confirmation? [closed]

I am looking for a way to have a strong confirmation from the user during sensitive operations from the command line or trigger by cron (sensitive script, decryption, etc...). Is there a generic application or a simple way to get this confirmation from the user without having to develop a dedicated mobile application ? Ideally biometrically.

Thanks for your idea !

1 Answer

If I understand your need correctly, you could set up 2FA for typing passwords (including sudo).

For this to work you have to install and configure Google Authenticator (or similar app) on your phone (which is outside the scope of this site).

On Ubuntu, you have to do the following:

1. Install google authenticator: sudo apt-get install libpam-google-authenticator

2. Open the file /etc/pam.d/common-auth and look for the line:

   auth [success=1 default=ignore] pam_unix.so nullok_secure

3. Above that line, add the following: (and then save and close):

   auth required pam_google_authenticator.so

4. Run this command from the terminal: google-authenticator (and answer y to every question). Do this for all users that have to use this.

5. After that, you'll get the secret key you can use to setup your Google Authenticator app on the phone.

6. When this is setup, the configured users will now have to type in a 6-digit code in addition to the password when doing sudo operations.

Link to the full article.

2