full-disclosure - Re: Remove all admin->root authorization prompts from OSX

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <2B9374AF-22C7-4D48-82B9-7B297FC2BD3D@gmail.com>
Date: Wed, 24 Jan 2007 19:09:04 -0800
From: Andrew Farmer <andfarm@...il.com>
To: K F (lists) <kf_lists@...italmunition.com>
Cc: full-disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: Remove all admin->root authorization prompts
	from OSX

On 24 Jan 07, at 17:20, K F (lists) wrote:
> http://www.petitiononline.com/31337OSX/petition.html

The petition reads, in part:
> In efforts to minimize the apparently unnecessary dialog boxes that  
> ask for permission to go from gid=admin to uid=root we are hereby  
> petitioning Apple to remove any further use of dialog boxes when  
> making the transition from gid=0 to uid=0. Since the admin group is  
> ALREADY root why can't you just stop asking us for authorization?

Do your research next time. gid=admin isn't root:
> powerbook% id
> uid=1000(me) gid=1000(me) groups=1000(me), 81(appserveradm), 79 
> (appserverusr), 80(admin)

... it's just an ordinary group with sudo, write privileges to some  
special folders, and some extra SecurityAgent magic in /etc/ 
authorization.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/