This script adds a line into /etc/sudoers that enables sudo for ALL users **without requiring a password.** Only requirement is a reboot into [single user mode](https://support.apple.com/en-us/HT201573).
**Mitigation**
Setup a [firmware password](https://support.apple.com/en-us/HT204455) or enable [FileVault](https://support.apple.com/en-us/HT204837) disk encryption.
```
REM MacOS AllSudo
REM Enables Sudo access for all users without a password
REM First boot the machine into single user mode - https://support.apple.com/en-us/HT201573
REM (You could probably script single user mode but I couldn't be bothered to play with the timings)