Note that you should never run a GUI application with elevated provilege, particulary an application that uses AppKit, this is EVIL.

See man authopen(1). This is built-in an helper tool design to read and write file using auth services. It handle all the authorization part for you.

And before using ExecuteWithPrivileges, you must read this:

http://developer.apple.com/documentation/Security/Conceptual/SecureCodingGuide/Articles/AccessControl.html



Le 3 juin 08 à 20:37, Michael Vannorsdel a écrit :

You can't really upgrade an already running process's privilege level. What I'd suggest is make a small launcher program that the user opens. This would ask for the admin password and then launch your main application using AuthorizationExecuteWithPrivileges and friends.


On Jun 3, 2008, at 7:07 AM, Nick Rogers wrote:

Hi,
I wish to access disk sectors using open() and pread(). but it fails for the system disk. So how can I get the user to type in admin passwd and then run my app in privileged mode.
Please point me to any sample code etc.
I tried ""BetterAuthorizationSample" code from apple, but using it to access disk sectors is 10 times slower then open() and pread(), cause it installs a helper tool in the system and to get sectors from it is slow.

_______________________________________________

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/devlists%40shadowlab.org

This email sent to [EMAIL PROTECTED]


_______________________________________________

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to [EMAIL PROTECTED]

Reply via email to