Re: Distributed objects: connecting to a process running as root?

• Subject: Re: Distributed objects: connecting to a process running as root?
• From: Shaun Wexler <email@hidden>
• Date: Sun, 30 Apr 2006 22:21:50 -0700
• Delivered-to: email@hidden
• Delivered-to: email@hidden

On Apr 30, 2006, at 10:09 PM, Jordan Krushen wrote:

I understand, but if you had to run your service as root to allow Mach
port connections from any user (which I previously thought based on
what you'd said) that seemed like a much higher risk than a service on
localhost running without privileges.  You'd probably need an
authentication layer anyway if you're using IP for other stuff, so I
figured it would be less work than supporting two approaches.

Thankfully though, that's not the case with launchd, as you
discovered, so I think you should be fine with this approach.  Just
make sure you thoroughly test and understand the Mach permission model
if you want to use it as the only basis for auth, though :)

<http://developer.apple.com/technotes/tn2005/tn2083.html>

--
Shaun Wexler
MacFOH
http://www.macfoh.com

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Cocoa-dev mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/email@hidden

• Prev by Date: "Send to iWeb" API?
• Next by Date: Correction: "Send to iWeb" API?
• Previous by thread: Re: Distributed objects: connecting to a process running as root?
• Next by thread: Distributed objects: Code required on both sides?
• Index(es):
  • Date
  • Thread