Re: authorization services
Re: authorization services
- Subject: Re: authorization services
- From: Greg Guerin <email@hidden>
- Date: Tue, 15 Sep 2009 14:39:38 -0700
Mark Thomas wrote:
This I cannot check the pid of the initiating process as it's
'AuthorizationExecuteWithPrivileges' which has launched this
process and given it extra privileges somehow, as the below path to
the tool is passed in via the 'cmd' argument, so it's the direct
tool which being launches not something else ?
That sentence doesn't make much sense. It's also run-on, which does
not improve its clarity.
You can check the pid and pgid of the initiating process: it's the
process where you call AuthorizationExecuteWithPrivileges(). That's
the initiation point. What happens after that is where things run
into trouble.
AFAICT, you haven't said what tool you're running as a privileged
process. If it's something you wrote, then you simply add code to
log its getppid() and getpgid() values. If it's not something you
wrote, then you should test your expectations and assumptions by
writing a small tool that only logs its getppid() and getpgid()
values, and run that from AEWP instead of the tool you're using now.
-- GG
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden