• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: Authorization without permanent setuid on helper
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Authorization without permanent setuid on helper


  • Subject: Re: Authorization without permanent setuid on helper
  • From: "M. Uli Kusterer" <email@hidden>
  • Date: Fri, 21 Jan 2005 03:53:04 +0100

At 20:12 Uhr +0000 20.01.2005, Finlay Dobbie wrote:
I don't know if that's the case for a multi-user system, though. Wouldn't that tool be pre-authorized for *everyone*?

If your tool self-restricts correctly then that doesn't matter.

When it comes to security I'd rather rely on Apple's code that's been used in hundreds of projects than on me myself writing bug-free and un-exploitable code.


Users can use the keychain to authorize my helper once without the hassle of having to re-enter the password every time. That will even ask them to re-authorize when the app is modified. Sounds safer to me.
--
Cheers,
M. Uli Kusterer
------------------------------------------------------------
"The Witnesses of TeachText are everywhere..."
http://www.zathras.de
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Cocoa-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden
References: 
 >Re: Authorization without permanent setuid on helper (From: Finlay Dobbie <email@hidden>)
 >Re: Authorization without permanent setuid on helper (From: Bob Ippolito <email@hidden>)
 >Re: Authorization without permanent setuid on helper (From: Finlay Dobbie <email@hidden>)

  • Prev by Date: Re: Cocoa global hotkey
  • Next by Date: Re: Cocoa global hotkey
  • Previous by thread: Re: Authorization without permanent setuid on helper
  • Next by thread: Re: Authorization without permanent setuid on helper
  • Index(es):
    • Date
    • Thread