On Apr 28, 2008, at 11:12 PM, JanakiRam wrote:
My daemon should run in log-off mode as well , hence starting with root
previlages.
UI is required only if the user has been logged-in.

In general, privilege escalation and -- much harder if not impossible -- de-escalation is an exceedingly difficult problem to solve in a secure and robust fashion.

Better if your daemon runs as a non-root process -- nobody is ideal, but not always feasible -- when no one is logged on and then a second daemon starts as the user logs in (stops as they log out) w/ communication with the always-on daemon.

b.bum

_______________________________________________

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to [EMAIL PROTECTED]

Reply via email to