Re:Authorization once, and .dmg
Re:Authorization once, and .dmg
- Subject: Re:Authorization once, and .dmg
- From: Sak Wathanasin <email@hidden>
- Date: Thu, 17 Oct 2002 01:40:38 +0100
At 16:41 -0400 16/10/2002, Jen Beaven wrote:
What's everyone else doing?
I have no idea what everyone else is doing, but I simply don't do the
"self-repair". Maybe I've missed something but the appl doesn't need
to be suid root: it asks the user for a user-name/passwd and if the
supplied credentials are those of an administrator, the tool (that
needs the privs) will succeed, otherwise it will not.
IMHO an appl that changes itself into one that is suid root creates
more of a security problem than it solves and makes the appl
needlessly complicated.
--
Sak Wathanasin
Network Analysis Limited
http://www.network-analysis.ltd.uk
Phone: (+44) 24 76 41 99 96 Mobile: (+44) 79 70 75 19 12
Fax: (+44) 24 76 69 06 90
_______________________________________________
macnetworkprog mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/macnetworkprog
Do not post admin requests to the list. They will be ignored.