Re: How to pass parameter including match symbol like "*" to command executed by AuthorizationExecuteWithPrivileges?

• Subject: Re: How to pass parameter including match symbol like "*" to command executed by AuthorizationExecuteWithPrivileges?
• From: John Stiles <email@hidden>
• Date: Wed, 29 Aug 2007 15:23:39 -0700
• Delivered-to: email@hidden
• Delivered-to: email@hidden

On Aug 29, 2007, at 3:16 PM, Mark Wagner wrote:

On 8/28/07, email@hidden <email@hidden> wrote:

As a general security consideration, privileged commands
should do as little as possible and do highly specific
things.  This minimizes the chance a mistake or exploit
can cause more damage than it should.

In this case, you probably should resolve the glob ("*")
first while unprivileged, and then call a sequence of
highly specific "rm" commands with the results.

The standard C library in <glob.h> (among other approaches)
handles "*".  Run "man 3 glob" in a terminal for more
information on the glob() function.

e.g. glob("test*.txt") might yield test1.txt and test2.txt.
With those results, you could generate commands like:
     "rm test1.txt"
     "rm test2.txt"
(or simply "rm test1.txt test2.txt").

And a malicious user could create a file named "-rf .." in the target
directory.  Using your suggestion, that would turn into a privileged
execution of the command "rm -rf .." -- not as bad as the dreaded "rm
-rf /", but still quite destructive.

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Carbon-dev mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/carbon-dev/email@hidden

• Prev by Date: Re: How to pass parameter including match symbol like "*" to command executed by AuthorizationExecuteWithPrivileges?
• Next by Date: Re: searching events for Appearance
• Previous by thread: Re: How to pass parameter including match symbol like "*" to command executed by AuthorizationExecuteWithPrivileges?
• Next by thread: Re: How to pass parameter including match symbol like "*" to command executed by AuthorizationExecuteWithPrivileges?
• Index(es):
  • Date
  • Thread