Re: [Debugging] Developer Tools Access needs to take control
Re: [Debugging] Developer Tools Access needs to take control
- Subject: Re: [Debugging] Developer Tools Access needs to take control
- From: Ross Bogue <email@hidden>
- Date: Fri, 21 Oct 2011 12:07:52 -0500
On Oct 20, 2011, at 2:08 PM, email@hidden wrote:
> Date: Wed, 19 Oct 2011 13:28:04 -0700
> From: Chris Hanson <email@hidden>
>
> I think you could also add your students to a single Open Directory group, and add that group to the _developer group.
>
> Or add them to groups representing their classes, add those to a "students who need to debug" group, and add that to the _developer group. There are lots of ways to structure it.
>
Hmmm. It's not working yet. WorkgroupManager won't let me add the OD group to _developer, since _developer is not on the OD master (it's local to each machine). And WGM won't let me create a _developer group on the OD master, because it would conflict with the one pre-defined on each machine.
I think the only way I could make it work would be if I used ARD to have dscl add the OD group to _developer on every machine in the building. Then I'd have to remember to do that again whenever we buy new machines.
It still strikes me as a band-aid solution that won't scale. How do large schools do it? Large schools would have hundreds of new students needing to use the programming lab machines every semester, and would have uncooperative ActiveDirectory admins controlling the group membership.
> Since Mac OS X 10.5 Leopard and Xcode 3.0, the privilege of attaching to other processes, to read and write their memory and otherwise manipulate their state, has been restricted to the _developer group as a security measure.
>
How does it help security if I have to manually add every student to the group?
Ross _______________________________________________
Do not post admin requests to the list. They will be ignored.
Xcode-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden