On a client machine attached to my Xserve I would like to allow a
non
admin user to be able to install programs. I believe I can do this by
editing the /etc/authorization file. Does anyone know of a good way to
do
this or a place where I can go to learn more about this?
You could try modifying the "system.install.*" rights in
/etc/authorization, and see if that's enough. For instance, you
could create a new group, add your admin users and this user to
it, and change the "group" keys. Or if your idea is to let
anyone logged into the console install apps, you could change
the class to "rule", and use "authenticate-session-owner-or-admin",
like the "system.login.screensaver" right.
If modifying "system.install.*" rights isn't enough, you may
need to modify the "system.privilege.admin" right, which grants
a very broad set of privileges.
For more on Authorization Services, you can check out the
Security Framework presentation here:
_____________________________________________________________
Leon Towns-von Stauber http://www.occam.com/leonvs/
"We have not come to save you, but you will not die in vain!"
