Full Disclosure mailing list archives

Re: Remove all admin->root authorization prompts from OSX


From: Andrew Farmer <andfarm () gmail com>
Date: Wed, 24 Jan 2007 19:09:04 -0800

On 24 Jan 07, at 17:20, K F (lists) wrote:
http://www.petitiononline.com/31337OSX/petition.html

The petition reads, in part:
In efforts to minimize the apparently unnecessary dialog boxes that  
ask for permission to go from gid=admin to uid=root we are hereby  
petitioning Apple to remove any further use of dialog boxes when  
making the transition from gid=0 to uid=0. Since the admin group is  
ALREADY root why can't you just stop asking us for authorization?

Do your research next time. gid=admin isn't root:
powerbook% id
uid=1000(me) gid=1000(me) groups=1000(me), 81(appserveradm), 79 
(appserverusr), 80(admin)

... it's just an ordinary group with sudo, write privileges to some  
special folders, and some extra SecurityAgent magic in /etc/ 
authorization.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: