Re: Distributed objects: connecting to a process running as root?
Re: Distributed objects: connecting to a process running as root?
- Subject: Re: Distributed objects: connecting to a process running as root?
- From: Shaun Wexler <email@hidden>
- Date: Sun, 30 Apr 2006 22:21:50 -0700
On Apr 30, 2006, at 10:09 PM, Jordan Krushen wrote:
I understand, but if you had to run your service as root to allow Mach
port connections from any user (which I previously thought based on
what you'd said) that seemed like a much higher risk than a service on
localhost running without privileges. You'd probably need an
authentication layer anyway if you're using IP for other stuff, so I
figured it would be less work than supporting two approaches.
Thankfully though, that's not the case with launchd, as you
discovered, so I think you should be fine with this approach. Just
make sure you thoroughly test and understand the Mach permission model
if you want to use it as the only basis for auth, though :)
<http://developer.apple.com/technotes/tn2005/tn2083.html>
--
Shaun Wexler
MacFOH
http://www.macfoh.com
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Cocoa-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden