Re: Environment/permissions on NSTask-launched app

FROM : Brad Peterson
DATE : Wed Jul 26 02:26:12 2006

--- Andrew Farmer <<email_removed>> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 25 Jul 06, at 01:47, Brad Peterson wrote:
> > Unfortunately, they also appear to give the
> correct
> > (that is, non-root user) information.  The parent
> app
> > is a server that communicates using a known
> network
> > port, and therefore (so it's been explained to me)
> > must run as root.
>
> That's not quite true - you can use a SUID helper
> tool to
> bind the port, then pass that into the main app
> using a
> UNIX-domain socket. The improved security is more
> than
> worth the extra difficulty, IMO.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.1 (Darwin)
>
>

iD8DBQFExn0YPa6RRaKl0ScRAmmpAJ0aS4+D6+MdX9XVPxPBRarKr54D2ACeIQ0f
> HdHIu8ulyQSLX8m7N79FzAw=
> =DYD3
> -----END PGP SIGNATURE-----
>


What what? Please say more about that. Please! Can you
point me to a reference or a sample? *fingers crossed*

Thanks!


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com