Name
AuthorizationTrampoline
Synopsis
AuthorizationTrampoline command filedesc argument...An SUID root program that invokes actions with
superuser privileges on behalf of applications calling the
AuthorizationExecuteWithPrivileges routine (part
of the Security framework’s Authorization Services
API). Successful use of this routine requires authorization against
the system.privilege.admin right defined in
/etc/authorization, meaning that
it’s limited to root and to
those in the admin group.
Options/Usage
-
argument A list of arguments to be passed to
command.-
command The path to the program to be executed with superuser privileges.
-
filedesc A file descriptor for a temporary file containing the authorization reference obtained by the application calling
AuthorizationExecuteWithPrivileges. The reference is used byAuthorizationTrampolineto determine if the request should be allowed.
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access