Re: Running a root process.

Posted response for google archiving.

# I would like to do some code like edit Apache configuration
# that requires uid root. What I can do is just install a setuid
# root and just make the changes unannounced. What I would like
# to do use some function like this
# 
# 	suexec(...) - Display the security dialog and on successful
# 		identification as an administrator user and password,
# 		exec the program ... as setuid root.
# 

The answer is AuthorizationExecuteWithPrivileges.


Sherm Pendley <spamtrap@[EMAIL PROTECTED]
> wrote:

Thanks for directing me to the specific function so I didn't have to wade
through a bunch of irrelevant (to a very specific question) issues about
authorisation and authentication and security servers. It must an Apple
cultural issue to spend an  hour not answerring a question that only takes
five seconds to answer.

(Now that I have the function name, I can read the interface and
understand Apple's entire philosophy on setuid programs, never explicitly
stated before, and understand how their security framework rests on that
philosophy and then proceed knowing where I am going to end up, instead
having to meander page after page not knowing if I can even do what I want
to do or if I will spend a week of studying only then to learn if I have
to abandon my strategy. So, yeah, thanks.)

--
SM Ryan http://www.rawbw.com/~wyrmwif/
If your job was as meaningless as theirs, wouldn't you go crazy too?