On 18 Aug 2016, at 05:21, James Bucanek <subscri...@gloaming.com> wrote:

> The process is launched by a privileged helper (installed a la 
> EvenBetterAuthorizationSample).

Let’s see if I understand this properly:

* You have a daemon, A, running as root.

* That daemon fork/exec's a helper tool, B.

* B switches its effective user ID to that of some user.

* B has mysterious problems.

If this is accurate, it’s not a huge surprise.  B is running in a parlous 
environment, because half of its context has been switched to that of the user 
but half of its environment has been inherited from the daemon.  It’s not 
uncommon for weird problems to crop up in that case. For example, have fun 
accessing the keychain from B (-:

Is B running as a role account user?  Or an actual user?

Share and Enjoy
--
Quinn "The Eskimo!"                    <http://www.apple.com/developer/>
Apple Developer Relations, Developer Technical Support, Core OS/Hardware


_______________________________________________
launchd-dev mailing list
launchd-dev@lists.macosforge.org
https://lists.macosforge.org/mailman/listinfo/launchd-dev

Reply via email to