Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re:Authorization once, and .dmg

At 16:41 -0400 16/10/2002, Jen Beaven wrote:


What's everyone else doing?

I have no idea what everyone else is doing, but I simply don't do the "self-repair". Maybe I've missed something but the appl doesn't need to be suid root: it asks the user for a user-name/passwd and if the supplied credentials are those of an administrator, the tool (that needs the privs) will succeed, otherwise it will not.

IMHO an appl that changes itself into one that is suid root creates more of a security problem than it solves and makes the appl needlessly complicated.

--
Sak Wathanasin
Network Analysis Limited http://www.network-analysis.ltd.uk

Phone: (+44) 24 76 41 99 96 Mobile: (+44) 79 70 75 19 12 Fax: (+44) 24 76 69 06 90
_______________________________________________
macnetworkprog mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/macnetworkprog
Do not post admin requests to the list. They will be ignored.
References: 
 >Authorization once, and .dmg (From: Jen Beaven <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.