Skip to content

Latest commit

 

History

History
52 lines (36 loc) · 1.67 KB

README.md

File metadata and controls

52 lines (36 loc) · 1.67 KB

Description

I use YubiKeys for second-factor in my macOS. I felt the need to lock the mac when i remove the yubikey from the USB. I havent found a tool to do this (maybe i was searching in the wrong side of the internet).

This (working) solution is based on USBNotification Example

I've tried other approaches, without success.

  • BritishKeyboardDetector : detach don't work
  • HardwareGrowl : i've simplified but stopped when i was looking to match vendor and product IDs
  • Lock Me Now : they are locked to iDevices hope they see my ticket and implement YubiKey support

Install

Double check if the Product and Vendor IDs are the same as i'm using. Run this command:

$ system_profiler SPUSBDataType | grep -B 1 0x1050

   Product ID: 0x0010
   Vendor ID: 0x1050

If not the same, edit main.c and change according. (open a GH issue so i can support it)

Install everything in you mac. Run this:

$ ./install

Check if everything is OK. Run:

  • insert your YubiKey
  • remove it from the USB
  • ... your mac should be locked

How it works

The plist file will launch the daemon 'yklock' which simply consumes the USB event, and then calls CGSession -suspend to lock your mac.

Notes

GCSession should be changed to native code LaunchEvents and com.apple.iokit.matching should have the detach event

DEBUG

You can run the daemon, and see the output

$ $HOME/.yklock/yklock