Re: Environment/permissions on NSTask-launched app

FROM : Andrew Farmer
DATE : Tue Jul 25 22:20:40 2006

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 25 Jul 06, at 01:47, Brad Peterson wrote:
> Unfortunately, they also appear to give the correct
> (that is, non-root user) information.  The parent app
> is a server that communicates using a known network
> port, and therefore (so it's been explained to me)
> must run as root.


That's not quite true - you can use a SUID helper tool to
bind the port, then pass that into the main app using a
UNIX-domain socket. The improved security is more than
worth the extra difficulty, IMO.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFExn0YPa6RRaKl0ScRAmmpAJ0aS4+D6+MdX9XVPxPBRarKr54D2ACeIQ0f
HdHIu8ulyQSLX8m7N79FzAw=
=DYD3
-----END PGP SIGNATURE-----