Welcome to the MacNN Forums.

MoKoNa^ · Mar 31, 2007, 12:17 PM

Hi everyone, I tried searching the forums, but it didn't really work for me, so I'm sorry in advance if this question has been answered before.

I have a small security problem. Someone has been reading my personal e-mail using my laptop that I use both at home and at work by simply opening Mail.

We share computers and we only have one local account on each and need to access each others' work, save for the email.

What I don't want to do is to go to the login window every time i leave the computer or require a password to wake up from sleep or exit the screensaver, what I want is to prohibit unauthorized people from launching Apple Mail on my computer.

Can I add some sort of password protection to the launch of specific applications? Doesn't have to be fancy in any way. Is there some other way to do it? Would be grateful for any help on this matter.

TETENAL · Mar 31, 2007, 12:40 PM

You can create one separate account just for your e-mail (your very private account so to speak) and continue to share the work account.

MoKoNa^ · Mar 31, 2007, 02:38 PM

That makes the mail program more difficult to access while I am at the computer. If I could just disable the launch of the app I could just quit when I leave the comp and then relaunch when I'm back. Is there a simpler way?

besson3c · Mar 31, 2007, 03:09 PM

You could write a little script that would remove executable permissions from the app, and another one to reset these permissions?

kick52 · Mar 31, 2007, 03:12 PM

you could do this by making an applescript app, and making the applescript app launch mail.app from inside itself, with root permisions (or just make your own password dialog), so it asks for your password.

CharlesS · Mar 31, 2007, 03:36 PM

Originally Posted by kick52

you could do this by making an applescript app, and making the applescript app launch mail.app from inside itself, with root permisions (or just make your own password dialog), so it asks for your password.

Whatever you do, do not launch Mail.app with root permissions. Launching a GUI app as root is a very dangerous thing to do, especially Cocoa apps.

If even one single Cocoa app is running as root on a system, any user can easily get a root shell on that system without having to type a password or anything, no matter what that user's privileges are.

hldan · Mar 31, 2007, 03:51 PM

Originally Posted by MoKoNa^

That makes the mail program more difficult to access while I am at the computer. If I could just disable the launch of the app I could just quit when I leave the comp and then relaunch when I'm back. Is there a simpler way?

Setting up a work and personal account is the easiest way. When Mail is launched it will simply ask for the user name and password to access email. People do this at work every day. If you are sharing your computer and that's too much trouble then you really don't care about protecting your privacy.

One other note, if you disable Mail from launching, how were you planning on accessing your email that would be easier than the above mentioned?

MoKoNa^ · Mar 31, 2007, 05:23 PM

Originally Posted by hldan

[...]if you disable Mail from launching, how were you planning on accessing your email that would be easier than the above mentioned?

I meant disable as in "type a password"-disable, which for me is easier than to switch workspaces. Sorry for the confusion.

Originally Posted by hldan

If you are sharing your computer and that's too much trouble then you really don't care about protecting your privacy.

Well, as the people I work with are almost completely oblivious to anything that has to do with computers that is not "point-and-click", using separate user accounts to fix my problem would be like killing a mosquito with a nuclear warhead. Sure, it might look cool, and definately do the job, but is prohibitively impractical.

chabig · Mar 31, 2007, 05:29 PM

In my opinion, "type a password" disable is no easier than "type a password" user switch. That's the right way to do it.

MoKoNa^ · Mar 31, 2007, 05:37 PM

Originally Posted by chabig

In my opinion, "type a password" disable is no easier than "type a password" user switch. That's the right way to do it.

Even if I still want to be notified when I receive an e-mail while working? I'm thinking that a password-protected launch will let me just quit the app when I leave for a coffee break, which will still allow others access to the work-stuff. When I get back I can just launch mail, type my password and everything will be back to normal.

Jacke · Mar 31, 2007, 07:02 PM

How about putting Mail on a password-protected disk image? (And then deleting the copy on the HD.) Obviously you'll have to remember to eject the image between sessions.

hldan · Mar 31, 2007, 08:24 PM

Originally Posted by MoKoNa^

Even if I still want to be notified when I receive an e-mail while working? I'm thinking that a password-protected launch will let me just quit the app when I leave for a coffee break, which will still allow others access to the work-stuff. When I get back I can just launch mail, type my password and everything will be back to normal.

Yeah, that's correct, if the only email on the laptop being read is only for you and nobody else to view then you can simply password protect it. It's very easy. When you launch it will ask for the password. After you launch mail go into "mail help" for instructions for password protection instead of auto-launching.
There's a widget that notifies you when new mail arrives even if your mail is password protected.

zro · Apr 1, 2007, 12:23 AM

Solution 1) Don't read personal e-mail at work!

Solution 2) Use webmail.

Solution 3) Has already been given. Remember when you share a user account you're sharing everything that user can do!

Uisce · Apr 2, 2007, 03:58 PM

I don't think you need to go to the Login Window, just enable fast user switching, use mail from a second account only you have the password to, and as long as the other user on your computer isn't an administor, it should be safe and easy to get to via fast user switching.