Executing arbitrary scripts as root is also a potentially major security hole.  
Your goal should be to do as little as possible as root (or other elevated 
privileges), and with as little flexibility as possible.  

Security is hard, and if you don't understand the issues, you should take a 
step back and learn them before attempting to work them.  If you get them 
wrong, you've just exposed your customers to having their machine attacked.

On Jan 5, 2011, at 1:49 PM, Shawn Bakhtiar wrote:

> 
> 
> Search google is not an answer, although a good suggestion. Could you please 
> post the solution you came up with to the list. There are many ways to skin 
> this cat, I think we would all benefit from your experience.
> 
> Correct. You are NOT running them as root, but you can easily tell the script 
> to "sudo su" and go from there, which in effect will make you root.
> 
> Also have you looked at making the uninstaller be an apple script? 
> 
> Also does any one know if there is a setup program like there use to be on 
> Windows (IE Nullsoft)?
> 
> 
>> Date: Wed, 5 Jan 2011 21:40:09 +0200
>> From: [email protected]
>> To: [email protected]
>> CC: [email protected]
>> Subject: Re: execute system("some script") on behalf of root from non-root   
>> app
>> 
>> Thanks Nick, i really should've googled before asking.
>> _______________________________________________
>> 
>> Cocoa-dev mailing list ([email protected])
>> 
>> Please do not post admin requests or moderator comments to the list.
>> Contact the moderators at cocoa-dev-admins(at)lists.apple.com
>> 
>> Help/Unsubscribe/Update your Subscription:
>> http://lists.apple.com/mailman/options/cocoa-dev/shashaness%40hotmail.com
>> 
>> This email sent to [email protected]
>                                         
> _______________________________________________
> 
> Cocoa-dev mailing list ([email protected])
> 
> Please do not post admin requests or moderator comments to the list.
> Contact the moderators at cocoa-dev-admins(at)lists.apple.com
> 
> Help/Unsubscribe/Update your Subscription:
> http://lists.apple.com/mailman/options/cocoa-dev/gandreas%40mac.com
> 
> This email sent to [email protected]

Glenn Andreas                      [email protected] 
The most merciful thing in the world ... is the inability of the human mind to 
correlate all its contents - HPL

_______________________________________________

Cocoa-dev mailing list ([email protected])

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to [email protected]

Reply via email to