• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re:Authorization once, and .dmg
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re:Authorization once, and .dmg


  • Subject: Re:Authorization once, and .dmg
  • From: Sak Wathanasin <email@hidden>
  • Date: Thu, 17 Oct 2002 01:40:38 +0100

At 16:41 -0400 16/10/2002, Jen Beaven wrote:


What's everyone else doing?

I have no idea what everyone else is doing, but I simply don't do the "self-repair". Maybe I've missed something but the appl doesn't need to be suid root: it asks the user for a user-name/passwd and if the supplied credentials are those of an administrator, the tool (that needs the privs) will succeed, otherwise it will not.

IMHO an appl that changes itself into one that is suid root creates more of a security problem than it solves and makes the appl needlessly complicated.

--
Sak Wathanasin
Network Analysis Limited http://www.network-analysis.ltd.uk

Phone: (+44) 24 76 41 99 96 Mobile: (+44) 79 70 75 19 12 Fax: (+44) 24 76 69 06 90
_______________________________________________
macnetworkprog mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/macnetworkprog
Do not post admin requests to the list. They will be ignored.
  • Follow-Ups:
    • Re:Authorization once, and .dmg
      • From: Peter Sichel <email@hidden>
References: 
 >Authorization once, and .dmg (From: Jen Beaven <email@hidden>)

  • Prev by Date: Authorization once, and .dmg
  • Next by Date: Re:Authorization once, and .dmg
  • Previous by thread: Authorization once, and .dmg
  • Next by thread: Re:Authorization once, and .dmg
  • Index(es):
    • Date
    • Thread