yubikeylockd

Simple daemon for locking and unlocking OS X with Yubikey.

Install

Run make clean && make

Additional requirements

• Configured integration with Yubico PAM module
• Require password immediately after sleep or screen saver begins

How it works

When you attach Yubikey for the first time launchctl will run yubikeylockd daemon that will simply monitor the state of the Yubikey USB devices. Daemon based on the sample provided by Apple for IOKit development.

It does two things:

• when device is attached it makes activity via IOPMAssertionDeclareUserActivity call to turn screen on
• after device is detached it uses IORequestIdle to put display to sleep and (if you configured it) also locks the OS X