Re: task_for_pid return dsChkErr
Re: task_for_pid return dsChkErr
- Subject: Re: task_for_pid return dsChkErr
- From: email@hidden
- Date: Thu, 5 Jun 2008 09:30:18 +0100
darwin-dev-bounces+graham.lee=email@hidden wrote on
2008-06-05 09:26:08:
> Oh, when I run this with sudo, it works well. And I found this comment
> in /private/etc/authorization:
> Used by task_for_pid(...). Task_for_pid is called by programs
> requesting full control over another program for things like debugging
> or performance analysis. This authorization only applies if the
> requesting and target programs are run by the same user; it will never
> authorize access to the program of another user.
>
> But why task_for_pid() still failed though same user? How does gdb can
> work without sudo? I just want to implement a tool to collect some
> information of my application.
http://developer.apple.com/releasenotes/Security/RN-CodeSigning/
"[…]unsigned code will not be allowed to execute the task_for_pid(3)
system call unless it is running as root."
Cheers,
Graham.
--
Graham Lee
Senior Macintosh Software Engineer, Sophos
Tel: 01235 540266 (Direct)
Web: http://www.sophos.com
Sophos - Security and Control
Sophos Plc, The Pentagon, Abingdon Science Park, Abingdon,
OX14 3YP, United Kingdom.
Company Reg No 2096520. VAT Reg No GB 348 3873 20.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden