Welcome to the MacNN Forums.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

You are here: MacNN Forums > Software - Troubleshooting and Discussion > Developer Center > Security and LaunchServices

Security and LaunchServices
Thread Tools
Dedicated MacNNer
Join Date: Jun 2000
Location: Dundas, Ontario, Canada
Status: Offline
Reply With Quote
Feb 28, 2002, 09:26 PM
 
Hello,

I am trying to launch a sub-application with root privileges and I have found that the security framework has some severe limitations in that it doesn't seem to properly pass the root environment to its sub-programs. For example, I cannot open any documents easily with this. I also cannot use it to launch Carbon apps since LaunchCFMApp seems to ignore the secure environment and run as the other user. I don't understand this since running it with sudo from the command line works properly.

I have been looking into using LauchServices since it offers program binding, etc, but I can't figure out if it can use security or how I would do that.

Can anyone help me out with this?
Jeff.
Spectral Class
"Shedding Light on Innovation"
     
Dedicated MacNNer
Join Date: Jan 2001
Location: Boulder, CO, USA
Status: Offline
Reply With Quote
Feb 28, 2002, 10:20 PM
 
i may be mis-remembering, but i believe that security patch released in October (called SecurityUpdate10-19-01), among other things, prevents the Window Server from running apps with any privileges other than those of the user who logged in.

although in that case you shouldn't be able to run a sudo-ed GUI app, either.

hm.
     
Dedicated MacNNer
Join Date: Jun 2000
Location: Dundas, Ontario, Canada
Status: Offline
Reply With Quote
Feb 28, 2002, 10:25 PM
 
That is what I am trying to work around. I used to be able to do this with open but the updated changed that. You can still run apps as other users from the terminal but the way that the authentication framework does it seems to be weeker than using the terminal somehow since it only works if you execute the binary inside an app bundle with it. If you try to run something carbon with LaunCFMApp or try to open any documents it doesn't work.

Any other ideas?
Spectral Class
"Shedding Light on Innovation"
     
   
Thread Tools
Forum Links
Forum Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Top
Privacy Policy
All times are GMT -5. The time now is 12:12 PM.
All contents of these forums © 1995-2011 MacNN. All rights reserved.
Branding + Design: www.gesamtbild.com
vBulletin v.3.8.7 © 2000-2011, Jelsoft Enterprises Ltd., Content Relevant URLs by vBSEO 3.3.2