Re: Admin programs and password
Re: Admin programs and password
- Subject: Re: Admin programs and password
- From: Eric Peyton <email@hidden>
- Date: Tue, 7 Aug 2001 11:18:30 -0500
This depends greatly on the application.
Most of the OS X applications that do this rely on the Security
framework, where the panel is supplied by the Security Server and
which provides a session authorization key.
Some applications (NetInfo Manager, Disk Utility, etc.) currently
use the older NetInfoKit authentication panel and are still
setuid(root). These applications present the panel themselves.
What issues are you worried about?
Eric
On Tuesday, August 7, 2001, at 09:38 AM, Andre John Mas wrote:
Hi,
I have noticed that a number of admin applications ask for a
admin user/password before doing any work. Is the dialogue
shown provided by the system or by the application, in other
words does the application ask for the password, or does it
delegate this task to the system who then provides a session
authorization key?
I ask this because I worrying about a potential security issues
if it is indeed the application that handles the user/password.
Andre
_______________________________________________
cocoa-dev mailing list
email@hidden
http://www.lists.apple.com/mailman/listinfo/cocoa-dev