Re: SSH_ASKPASS does not allow to use NSConnection?!
Re: SSH_ASKPASS does not allow to use NSConnection?!
- Subject: Re: SSH_ASKPASS does not allow to use NSConnection?!
- From: "[ChungwaSoft] Fabian Jäger" <email@hidden>
- Date: Wed, 19 Oct 2011 11:01:41 +0200
Am 03.10.2011 um 11:31 schrieb Quinn The Eskimo!:
> The executive summary is that you can't connect 'up' the stack. That is, you can have user code connect to daemon code, but not the other way around.
Thanks, that helped!
> You can create a connection from an NSSocketPort, and that lets you create it using either TCP or UNIX domain sockets. If you search the docs for creating a connection over TCP, it's easy to see how to convert it to UNIX domain sockets.
>
> However, I strongly recommend against using DO in a situation like this. DO has numerous problems on current systems, but the important one, the one that can't just be fixed as a bug, relates to security. DO is based on object archiving and de-archiving, and that's extremely risky if you're crossing security domains, as explained in the "Archiving and Unarchiving Data In Mac OS X" section of the "Secure Coding Guide".
So, what would be the recommended way of doing IPC between my daemon and the user application in a secure manner?
Best regards,
Fabian
Attachment:
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden