ANN: PMQueueManager ( My first security manager app)
ANN: PMQueueManager ( My first security manager app)
- Subject: ANN: PMQueueManager ( My first security manager app)
- From: Jerry LeVan <email@hidden>
- Date: Tue, 30 Mar 2004 19:47:28 -0500
Hello,
I have just posted PMQueueManager (
http://homepage.mac.com/levanj/Cocoa ).
PMQueueManager is a variation of my ShowPMQueue. ie It allows users to
schedule poweron/poweroff/sleep/wake events.
It differs from ShowPMQueue in that it uses the Security manager to
authenticate
the user prior to doing an add or delete event. If the user can supply
an administrative login and password the Security manager will launch a
small
foundation tool as root via AuthorizationExecuteWithPrivileges to
actually
do the insertion/deletion.
I am a bit concerned about doing this task via
AuthorizationExecuteWithPrivileges.
Apple does not recommend this usage. However the foundation tool is
very small,
it grabs the argv parameters and only does an insert/delete operation,
there
is no "user interaction".
It appears that the process launched by
AuthorizationExecuteWithPrivileges does not
use /bin/sh so that specifying a parameter like "jerry ; /bin/rm -rf /"
instead of
"jerry" won't work havoc on the unsuspecting user.
A future version will use "steppers" to specify a target date and the
scheduledBy field
will be locked to the login name. I basically don't want the user to
have any free
hand with choosing parameters.
I would appreciate any constructive criticisms :)
--Jerry
PS: Does anyone know if the "missing man pages" are anywhere to be
found? Seems like
a lot of the BSD pages are missing ( hardly anything on stdio...).
_______________________________________________
cocoa-dev mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/cocoa-dev
Do not post admin requests to the list. They will be ignored.