AuthorizationRightSet unexpectedly fails on os x 10.9 DP1; authd logs strange error
Our preflight installer script needs to add an authorization right. This worked on OS X 10.4-10.8 but suddenly stopped working on OS X 10.9 DP1. AuthorizationRightSet() fails with -60005 (errAuthorizationDenied), and the following error message is logged by authd: "Jul 20 07:20:15 Testers-Mac.local com.apple.authd[66]: server[584]: AuthorizationRightSet Denied process identifier not found, missing code signature." Our installer runs as superuser. Executing the below code from a command line program by root fails in the same manner. Here's the source code: int SetAuthRight() { OSStatus status; AuthorizationRef auth; status=AuthorizationCreate(NULL, kAuthorizationEmptyEnvironment, kAuthorizationFlagDefaults, &auth); if(status!=noErr){ syslog(LOG_ERR, "AuthorizationCreate failed: %d.", (int)status); return -1; } status=AuthorizationRightSet(auth, "mycompany.myapp.auth", CFSTR(kAuthorizationRuleAuthenticateAsAdmin), CFSTR("my_display_message"), NULL, NULL); AuthorizationFree(auth, kAuthorizationFlagDefaults); if(status!=noErr){ syslog(LOG_ERR, "AuthorizationRightSet failed: %d.", (int)status); return -1; } return 0; } Thanks in advance. Michael Ritter _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app... This email sent to site_archiver@lists.apple.com
participants (1)
-
Michael Ritter