Issue #22830 has been updated by Brian Warsing.

Clay,

See this thread ...

https://devforums.apple.com/message/908800#908800

You won't need execs of the security util to make this work:

sudo sqlite3 /var/db/auth.db 'UPDATE rules SET "group"="everyone" WHERE 
name="system.preferences.datetime";'
sudo sqlite3 /var/db/auth.db 'UPDATE rules SET "group"="everyone" WHERE 
name="system.preferences";'
sudo reboot

Should give the desired effect.

Extrapolating, (and I have not researched this) if there were Ruby gem 
available that could handle SQLite dbs, one could eschew exec statements 
altogether.


----------------------------------------
Bug #22830: macauthorization provider is broken on 10.9 (mavericks)
https://projects.puppetlabs.com/issues/22830#change-99016

* Author: Clay Caviness
* Status: Unreviewed
* Priority: Normal
* Assignee: 
* Category: OSX
* Target version: 
* Affected Puppet version: 
* Keywords: 
* Branch: 
----------------------------------------
In OS X 10.9, `/etc/authorization` has been "deprecated"; as of the GM, the 
update will move `/etc/authorization` to `/etc/authorization.deprecated`.

There is now `/System/Library/Security/authorization.plist` but it seems to 
just be the defaults; changing a right with the `security authorizationdb` 
command doesn't change that file, but instead updates a sqlite db at 
`/var/db/auth.db`.

I did some quick testing, and just changing `AuthDB` in 
`puppet/provider/macauthorization/macauthorization.rb` isn't enough because the 
provider reads the plist to determine current state, but in the 10.9 world the 
current state is reflected in the `auth.db` file (or the output of `security 
authorizationdb` commands) so even when a right change is applied, puppet 
doesn't know.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to