Re: Privileged helper tool?
Re: Privileged helper tool?
- Subject: Re: Privileged helper tool?
- From: Jeff Dyck <email@hidden>
- Date: Fri, 08 Aug 2014 15:24:19 -0700
Rob,
Nice to know I’m not the only one struggling with this topic - I keep thinking “there’s got to be an easier way” but I guess not. Guess I need to start simple and work on an easy proof-of-concept. Assuming I have any success I think I’ll have to post it for those who come after, cause right now info is really really hard to find :(.
Part of me wants to just drop back to ‘do shell script’ but I’ve also dabbled with MacRuby (in the past) and RubyMotion more recently and really like ruby development, but run into this same privilege escalation block, but without the ‘do shell script’ alternative, so I guess I’m going to have to figure this out if I ever want to port any of my apps (all administrative apps that in one way or another need escalated privileges).
Once I dig into this further I may just hit you up with more specific questions.
Jeff
On Aug 8, 2014, at 12:25 PM, Robert DuToit <email@hidden> wrote:
> Hi Jeff,
>
> I have spent several years working with root privileges with my ASObjC app backupList+ that uses rsync to copy files. I have used the "do shell script with admin privs” for some time but in mavericks it will freeze the UI, if you have one such as a progress window. I think this might be fixed a bit in Yosemite - have to test more. I successfully rewrote the whole project in OBJc a couple years ago using the old Better Authorization Sample which was hairy to get through, especially the communication with helper tool bits. I returned to "do shell…” since it was just too ponderous.
>
> I have got SMJobBless to work for the helper installation etc. now which is way less complicated but have to delve into the helper communications. In the mean time I have done what SuperDuper does and use a setuid on the helper tool to run the tasks. This is totally frowned upon by Apple but SuperDuper is #1 in backup/cloning for years so I feel ok about it till I can work out the new and approved ways. There really should be a simpler method of root access that is safe. Mike Bombich (Carbon Copy Cloner) uses the apple preferred way of root privileges with his rsync backups and really has it down but I haven’t been able to get that far yet.
>
> You will definitely have to do all the communications in OBJc, C as well as helper tool but I think you can put that all inside your ASObjC app.
>
> Any questions feel free to ask . You are not alone. There isn’t a whole lot info out there on how to do all this, as you have seen.
>
> Rob
_______________________________________________
Do not post admin requests to the list. They will be ignored.
applescriptobjc-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden