Re: Application rights.
Re: Application rights.
- Subject: Re: Application rights.
- From: "Sherm Pendley" <email@hidden>
- Date: Thu, 22 May 2008 12:46:08 -0400
On Thu, May 22, 2008 at 12:08 PM, Joseph Kelly <email@hidden> wrote:
Is PackageMaker suitable for over-writing files of an existing install?
The package installer explicitly supports upgrades. When a receipt is found
for an earlier version of the package, the package is marked as "upgrade"
rather than "install" in the "advanced install" pane, and the space
requirements adjusted to account for the fact that the installed files will
overwrite the old ones, rather than using new space. Also, it supports both
pre- and post-flight scripts for both new installation and upgrades.
Also a question: does anyone know of a Cocoa/obj-C wrapper around
> auth-framework? It might be a useful sort of project/tool ;-)
Apple provides an Objective-C interface. It lacks an
AuthorizationExecuteWithPrivileges() method, but I think that Apple omitted
that deliberately. Cocoa has dynamic messaging, which makes code injection
quite easy. The parent app isn't running as root, so the user could inject
code to alter the call to an AEWP method and run anything root. Not a Good
Thing, and *much* more difficult to do to the existing C function.
That said, there's still a lot of good stuff in the Objective-C interface -
standard security-related interface elements, means with which to obtain
authorization and pass it to a factored suid tool, and so forth. It's split
into two frameworks, one with the GUI view classes and the other with an
SFAuthorization class that can also be used from a Foundation tool.
<
http://developer.apple.com/documentation/Security/Reference/SecurityObjectiveC/index.html
>
<
http://developer.apple.com/documentation/Security/Reference/AuthServicesObjCRef/index.html
>
sherm--
--
Cocoa programming in Perl: http://camelbones.sourceforge.net
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden