[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] Remove all admin->root authorization prompts from OSX
- To: K F (lists) <kf_lists@xxxxxxxxxxxxxxxxxxx>
- Subject: Re: [Full-disclosure] Remove all admin->root authorization prompts from OSX
- From: Andrew Farmer <andfarm@xxxxxxxxx>
- Date: Wed, 24 Jan 2007 19:09:04 -0800
On 24 Jan 07, at 17:20, K F (lists) wrote:
> http://www.petitiononline.com/31337OSX/petition.html
The petition reads, in part:
> In efforts to minimize the apparently unnecessary dialog boxes that
> ask for permission to go from gid=admin to uid=root we are hereby
> petitioning Apple to remove any further use of dialog boxes when
> making the transition from gid=0 to uid=0. Since the admin group is
> ALREADY root why can't you just stop asking us for authorization?
Do your research next time. gid=admin isn't root:
> powerbook% id
> uid=1000(me) gid=1000(me) groups=1000(me), 81(appserveradm), 79
> (appserverusr), 80(admin)
... it's just an ordinary group with sudo, write privileges to some
special folders, and some extra SecurityAgent magic in /etc/
authorization.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/