From c1ac8e9b3df081a897a0a97f9927aee1ae9ccec3 Mon Sep 17 00:00:00 2001
From: Malo Bourgon <mbourgon@gmail.com>
Date: Thu, 17 Feb 2022 10:22:42 -0800
Subject: [PATCH] Use GNU version of sed from nixpkgs

---
 modules/security/pam.nix | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/modules/security/pam.nix b/modules/security/pam.nix
index 7de766ef..ac7603f2 100644
--- a/modules/security/pam.nix
+++ b/modules/security/pam.nix
@@ -19,18 +19,19 @@ let
   let
     file   = "/etc/pam.d/sudo";
     option = "security.pam.enableSudoTouchIdAuth";
+    sed = "${pkgs.gnused}/bin/sed";
   in ''
     ${if isEnabled then ''
       # Enable sudo Touch ID authentication, if not already enabled
       if ! grep 'pam_tid.so' ${file} > /dev/null; then
-        sed -i "" '2i\
+        ${sed} -i '2i\
       auth       sufficient     pam_tid.so # nix-darwin: ${option}
         ' ${file}
       fi
     '' else ''
       # Disable sudo Touch ID authentication, if added by nix-darwin
       if grep '${option}' ${file} > /dev/null; then
-        sed -i "" '/${option}/d' ${file}
+        ${sed} -i '/${option}/d' ${file}
       fi
     ''}
   '';