RE: Setting the Environment with AuthorizationExecuteWithPrivileges
RE: Setting the Environment with AuthorizationExecuteWithPrivileges
- Subject: RE: Setting the Environment with AuthorizationExecuteWithPrivileges
- From: "Tommy Braas" <email@hidden>
- Date: Mon, 2 Jul 2001 08:46:28 -0700
Thomas,
Whenever you want to execute something in a secure environment the path to the executable MUST be absolute. If not, well, a user might have an application with the same name as the one you are trying to execute in the path BEFORE your application. That application could potentially do something bad to the system if run with extended privileges. Since this poses a security problem it is no allowed.
You would probably want to try to resolve the path you get passed in to something absolute. Since I don't know which environment you're working in I can't give you any more pointers...
Good luck!
\tommy
>
-----Original Message-----
>
From: email@hidden
>
[mailto:email@hidden]On Behalf Of email@hidden
>
Sent: Monday, 25 June, 2001 11:47 PM
>
To: email@hidden
>
Subject: Setting the Environment with AuthorizationExecuteWithPrivileges
>
>
>
I'm trying to execute the Apache apxs utility to register a dso via
>
AuthorizationExecuteWithPrivileges. the problem is, the apxs-utility
>
reports a insecure path setting (i think because . is included as the
>
path is transfered from the normal user on execution).
>
>
does anyone know how to solve this problem? i wanted to change the
>
environment of the new task running with privileges. but i have found
>
nothing about setting the environment in the security headers or any
>
available documentation.
>
>
thanks,
>
>
thomas.
>
_______________________________________________
>
cocoa-dev mailing list
>
email@hidden
>
http://www.lists.apple.com/mailman/listinfo/cocoa-dev