[Cybergoat]

I'm having trouble running a cocoa .app as root. Basicially, what I want to have is a "launcher" application that, when opened, will give the user an option to launch my program as an administrator, or normally. I've looked through Apple's security examples, but I was unable to get the .app to launch. I want to follow Apple's security guidelines, so I don't want to pass the username/password to the terminal or anything. I'd like the program to behave basically like Brian Hill's Pseudo program. I'm assuming I'd need to use LaunchCFMapp, or something along those lines. Any help or ideas will be appreciated.

Nick

[hayesk]

Originally posted by Cybergoat:
I'm having trouble running a cocoa .app as root. Basicially, what I want to have is a "launcher" application that, when opened, will give the user an option to launch my program as an administrator, or normally. I've looked through Apple's security examples, but I was unable to get the .app to launch. I want to follow Apple's security guidelines, so I don't want to pass the username/password to the terminal or anything. I'd like the program to behave basically like Brian Hill's Pseudo program. I'm assuming I'd need to use LaunchCFMapp, or something along those lines. Any help or ideas will be appreciated.

Nick

What about using the SetUID bit on the executable?

[Cybergoat]

The only problem with using the setUID bit is that when the program is moved after installation, the bit is turned off, and would require extra programming to reset it. As I previously posted, I'd also like to give the user the option to launch the program as root or not, so thus I don't think using the setUID bit is the best path.

Nick

[Angus_D]

You shouldn't run applications as root. The applications should factor out any privileged code into a helper application.

[Cybergoat]

I understand that the application should not be run as root, but for this situation, be it the application itself, or the helper application, I need to be able to run it as root.

Nick

[wadesworld]

Authentication services provides the ability for your program to acquire root permissions.

I haven't used it, so I can't help, but if you've been unable to figure it out, you need to keep trying - that's the right way to do it.

Wade

[Angus_D]

See ADC Sample Code: Security, specifically AuthSample, AuthForAll and MoreAuthSample. Also see the Security documentation, "Performing Privileged Operations With Authorization Services" is particularly important.