Re: Authorization - Perl as helper tool vs. SUID
Re: Authorization - Perl as helper tool vs. SUID
- Subject: Re: Authorization - Perl as helper tool vs. SUID
- From: Sherm Pendley <email@hidden>
- Date: Mon, 10 Jan 2005 17:59:59 -0500
On Jan 10, 2005, at 5:31 PM, Bob Ippolito wrote:
The suid bit is merely a matter of convenience, so that it is not
necessary to authorize every time.
Thanks - that's what I was thinking, but it's good to have independent
confirmation where security issues are concerned.
Apple's example is as clear as mud about this. In it, they fiddle with
the suid bit so that the helper tool doesn't need to authorize every
time it runs - but in the parent app they pre-authorize every time
anyway. That's what led me to think I might have missed something - the
example app isn't actually made any more convenient by making the
helper tool suid, so I was wondering if there were some other reason it
was doing it.
sherm--
Cocoa programming in Perl: http://camelbones.sourceforge.net
Hire me! My resume: http://www.dot-app.org
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Cocoa-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden