Re: [Split off] Re: Kernel Extensions
Re: [Split off] Re: Kernel Extensions
- Subject: Re: [Split off] Re: Kernel Extensions
- From: Stéphane Sudre <email@hidden>
- Date: Tue, 18 Nov 2003 19:03:00 +0100
You're right but the problem was this feature was added for security
reason because some kext were released with casual user's privileges.
But sometimes ago in a not so far away galaxy, Installer.app was not
able to install root:wheel items outside /System/Library/Extensions. So
on one hand, there was a need for unnecessary too high security:
(root:wheel vs root:admin) and on the other side, there was no obvious
mean to respect it with the provided tools.
On Tuesday, November 18, 2003, at 06:32 PM, Corey O'Connor wrote:
Correct me if I'm wrong but...
Even though any admin can be root:wheel if they want, they still have
to su or sudo to do so. In my opinion this is a safety net against
accidental kext modification. As with any mucking about in the kernel
level, you needa be really sure what your doing. So I have no problems
with more protections against modifying kext's.
_______________________________________________
darwin-kernel mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/darwin-kernel
Do not post admin requests to the list. They will be ignored.