Lists

Open Menu Close Menu

Terms and Conditions
Lists hosted on this site
Email the Postmaster
Tips for posting to public mailing lists

Re: Executing privileged work using exec

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Executing privileged work using exec

Subject: Re: Executing privileged work using exec
From: Quinn <email@hidden>
Date: Mon, 17 May 2004 12:48:19 +0100

At 20:33 -0700 13/5/04, OL&L Lists wrote:

Does the Authorization Framework really use exec to do its work?

Of course. There's no way to start a new executable on Mac OS X without using exec.

I thought Apple's security team said this was a no-no.

I think you're confusing exec with "system" or "popen". Those calls invoke a shell, which causes all sorts of unexpected security vulnerabilities.

S+E
--
Quinn "The Eskimo!" <http://www.apple.com/developer/>
Apple Developer Technical Support * Networking, Communications, Hardware
_______________________________________________
macnetworkprog mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/macnetworkprog
Do not post admin requests to the list. They will be ignored.

References:
	>Executing privileged work using exec (From: OL&L Lists <email@hidden>)

Prev by Date: Re: HTTPS streams through a proxy
Next by Date: using snmpget in a Carbon app
Previous by thread: Executing privileged work using exec
Next by thread: using snmpget in a Carbon app
Index(es):
- Date
- Thread