• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag
 

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: [Debugging] Developer Tools Access needs to take control
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Debugging] Developer Tools Access needs to take control


  • Subject: Re: [Debugging] Developer Tools Access needs to take control
  • From: Ross Bogue <email@hidden>
  • Date: Fri, 21 Oct 2011 12:07:52 -0500

On Oct 20, 2011, at 2:08 PM, email@hidden wrote:

> Date: Wed, 19 Oct 2011 13:28:04 -0700
> From: Chris Hanson <email@hidden>
>
> I think you could also add your students to a single Open Directory group, and add that group to the _developer group.
>
> Or add them to groups representing their classes, add those to a "students who need to debug" group, and add that to the _developer group.  There are lots of ways to structure it.
>

Hmmm.  It's not working yet.  WorkgroupManager won't let me add the OD group to _developer, since _developer is not on the OD master (it's local to each machine).  And WGM won't let me create a _developer group on the OD master, because it would conflict with the one pre-defined on each machine.

I think the only way I could make it work would be if I used ARD to have dscl add the OD group to _developer on every machine in the building.  Then I'd have to remember to do that again whenever we buy new machines.

It still strikes me as a band-aid solution that won't scale.  How do large schools do it?  Large schools would have hundreds of new students needing to use the programming lab machines every semester, and would have uncooperative ActiveDirectory admins controlling the group membership.


> Since Mac OS X 10.5 Leopard and Xcode 3.0, the privilege of attaching to other processes, to read and write their memory and otherwise manipulate their state, has been restricted to the _developer group as a security measure.
>

How does it help security if I have to manually add every student to the group?

Ross _______________________________________________
Do not post admin requests to the list. They will be ignored.
Xcode-users mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden

  • Follow-Ups:
    • Re: [Debugging] Developer Tools Access needs to take control
      • From: Ben Gollmer <email@hidden>
  • Prev by Date: OT: Steve Jobs Special
  • Next by Date: Debugging with lldb causes crash, but not with gdb
  • Previous by thread: OT: Steve Jobs Special
  • Next by thread: Re: [Debugging] Developer Tools Access needs to take control
  • Index(es):
    • Date
    • Thread