Re: AuthorizationExecuteWithoutPrivileges?
Re: AuthorizationExecuteWithoutPrivileges?
- Subject: Re: AuthorizationExecuteWithoutPrivileges?
- From: Kris Amico <email@hidden>
- Date: Mon, 12 Aug 2002 13:22:14 -0700
If you're using Cocoa, I guess I just don't understand. What's wrong with
using NSTask? I am afraid I don't know a way to use the Authorization system
in the perverted way you propose. AFAIK, it was not made with that in mind.
:(
On 8/12/02 4:39 AM, "Gerben Wierda" <email@hidden> wrote:
>
I am setting up an app wchih uses AuthorizationExecuteWithPrivileges.
>
Sometimes I want to run tasks also without privileges. No what I do not
>
like is to have two separate subprocess running environments in my app,
>
so I want to use AuthorizationExecuteWithPrivileges both for authenticed
>
and non-authenticated stuff. In othe rwords, I need some sort of
>
AuthorizationExecuteWithoutPrivileges behaviour ;-)
>
>
I tried creating different AuthorizationRefs (with
>
com.apple.TestApp.benign for instance), but when I try to use these
>
non-authenticated AUthorizationRefs in
>
AuthorizationExecuteWithPrivileges I get a Authentication telling me
>
something about wanting to change stuff in AuthorizationTrampoline, so I
>
must have hit on some internal state I the Security Framework.
>
>
Anyway, can someone tell me how I can create an AuthorizationRef for
>
running an subprocess that will be accepted by
>
AuthorizationExecuteWithPrivileges in such a way that that subprocess is
>
actually started, but not with the privileges. Changing
>
/etc/authorization is not an option, this needs to work on system with
>
an original authorization file. Or do I indeed have to write a second
>
thread in my app and do some fork/execve there myself? I guess so,
>
having read more on the framework, but I'd like to be sure I am not
>
overlooking something trivial.
>
>
Thanks,
>
>
G
>
_______________________________________________
>
cocoa-dev mailing list | email@hidden
>
Help/Unsubscribe/Archives:
>
http://www.lists.apple.com/mailman/listinfo/cocoa-dev
>
Do not post admin requests to the list. They will be ignored.
--
Kris Amico <email@hidden>, AIM: Kris Amico
Senior Software Engineer
Macintosh Client Software Development
EarthLink, Inc.
_______________________________________________
cocoa-dev mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/cocoa-dev
Do not post admin requests to the list. They will be ignored.