[Full-disclosure] Remove all admin->root authorization prompts from OSX

Andrew Farmer andfarm at gmail.com
Thu Jan 25 03:09:04 GMT 2007


On 24 Jan 07, at 17:20, K F (lists) wrote:
> http://www.petitiononline.com/31337OSX/petition.html

The petition reads, in part:
> In efforts to minimize the apparently unnecessary dialog boxes that  
> ask for permission to go from gid=admin to uid=root we are hereby  
> petitioning Apple to remove any further use of dialog boxes when  
> making the transition from gid=0 to uid=0. Since the admin group is  
> ALREADY root why can't you just stop asking us for authorization?

Do your research next time. gid=admin isn't root:
> powerbook% id
> uid=1000(me) gid=1000(me) groups=1000(me), 81(appserveradm), 79 
> (appserverusr), 80(admin)

... it's just an ordinary group with sudo, write privileges to some  
special folders, and some extra SecurityAgent magic in /etc/ 
authorization.




Full-Disclosure is hosted and sponsored by Secunia.