Name

AuthorizationTrampoline

Synopsis

AuthorizationTrampoline command filedesc argument...

An SUID root program that invokes actions with superuser privileges on behalf of applications calling the AuthorizationExecuteWithPrivileges routine (part of the Security framework’s Authorization Services API). Successful use of this routine requires authorization against the system.privilege.admin right defined in /etc/authorization, meaning that it’s limited to root and to those in the admin group.

Options/Usage

argument

A list of arguments to be passed to command.

command

The path to the program to be executed with superuser privileges.

filedesc

A file descriptor for a temporary file containing the authorization reference obtained by the application calling AuthorizationExecuteWithPrivileges. The reference is used by AuthorizationTrampoline to determine if the request should be allowed.

Get Mac OS X Panther in a Nutshell, 2nd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.