On Dec 23, 2013, at 10:58 PM, Madhavi Gundeti <madhavi.gundet...@gmail.com> 
wrote:

> I am developing a daemon which runs as root

That’s not recommended, because the daemon will have the ability to do all 
kinds of bad things. A bug could destroy someone’s system, or worse, a security 
hole in your code could let an attacker take over the OS.

It’s best to follow the “Principle of least privilege”: run the daemon as a 
separate account and give that account only the privileges it needs. Or run as 
an agent process under the current user’s account. Apple has a tech note about 
daemons and agents that goes into this.

—Jens
_______________________________________________

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to arch...@mail-archive.com

Reply via email to