device/fido/mac: add more specific check for TouchID availability

Prior to macOS 10.13.2, the only way to check for TouchID was to check
for the ability to evaluate the LAPolicyDeviceOwnerAuthenticationWithBiometrics
policy. 10.13.2 introduced a more granular check for LABiometryTypeTouchID.

This PR ensures on systems after macOS 10.13.2 that we check for this specific
biometry, and fall back to to the old check if we do not have access to this new enum.

Bug: N/A
Change-Id: I3a3d2d332547b09cf3c6e062709ed06b6e1a052d
Reviewed-by: Robert Sesek <>
Reviewed-by: Martin Kreichgauer <>
Commit-Queue: Martin Kreichgauer <>
Cr-Commit-Position: refs/heads/master@{#636651}
3 files changed