For those like me who forget that the Yubikey is set up for this kind of thing you can add a cue to /etc/pam.d/sudo to give you a message, instead of just the paused prompt.
auth sufficient pam_u2f.so cue [cue_prompt="Tap the Yubikey to Sudo"]
Coder. FOSS lover. Breaker of things.
I'm a firm believer that the best way to understand how something works is to break it, and try to put it back together again.
Thanks for this, A great walkthough.
For those like me who forget that the Yubikey is set up for this kind of thing you can add a cue to
/etc/pam.d/sudoto give you a message, instead of just the paused prompt.auth sufficient pam_u2f.so cue [cue_prompt="Tap the Yubikey to Sudo"]Developer Reference has some other good options to add if you need them too
Ah I never thought of this. Thank you for sharing!!