Re: Making folders and files as non-admin user [WAS: Re: Privileged shutdown]
Re: Making folders and files as non-admin user [WAS: Re: Privileged shutdown]
- Subject: Re: Making folders and files as non-admin user [WAS: Re: Privileged shutdown]
- From: Christopher Nebel <email@hidden>
- Date: Sun, 25 Jul 2004 20:36:48 -0700
On Jul 25, 2004, at 2:51 PM, Axel Luttgens wrote:
In fact, "with administrator privileges" is a misnomer.
The "with administrator privileges" just tells AppleScript to execute
the shell command through sudo.
But the script must already be running as an administrator user for
this to be effective.
Well, sort of. There's a difference between being in the
administrative group and actually exercising that power. By default,
even an admin is not allowed to, say, create files inside /System --
you have to show your badge, so to speak.
Currently, "do shell script" does that by calling sudo(8), but that
leads to the obvious problem that the current user must be an admin (or
more precisely, in the sudoers(5) file), as you've seen. This isn't a
bug in one sense -- sudo is working exactly as designed -- but it is a
lame design and will be fixed in a future release to use the standard
authentication dialog, which will let you type in both the user name
*and* password. This will also fix the other obvious problem of the
password showing up in plaintext in ps(1).
--Chris Nebel
AppleScript Engineering
_______________________________________________
applescript-users mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/applescript-users
Do not post admin requests to the list. They will be ignored.