Re: "Authorization API" (Was: do shell script)
Re: "Authorization API" (Was: do shell script)
- Subject: Re: "Authorization API" (Was: do shell script)
- From: Christopher Nebel <email@hidden>
- Date: Wed, 16 Feb 2005 12:30:54 -0800
On Feb 16, 2005, at 5:01 AM, Stephen Jonke wrote:
On Feb 15, 2005, at 7:27 PM, Christopher Nebel wrote:
More precisely, it means you will run the command with elevated
privileges. Currently, this is implemented using sudo(8); a future
version will use the Authorization APIs. Do *not* rely on it using
sudo.
What precisely does this mean? How will our scripts currently using
"with administrator privileges" be affected?
In general, scripts that simply say 'do shell script
"something-that-isn't-sudo" with administrator privileges' won't notice
the difference. (There is one exception to this: the new scheme only
alters the effective user id, not the real user id. Some tools,
notably Perl, will notice this and raise their security bar. This is
generally considered a feature.)
However, if you're relying on the fact that w.a.p. uses sudo(8) by,
say, manually resetting the timer using "sudo -k", or extending it
using "sudo -v", or editing the sudoers(5) file to alter specific
users' privileges, it won't work any more.
--Chris Nebel
AppleScript Engineering
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Applescript-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden