Re: Elevating your privileges

[David Chisnall]

Elevating privileges is not something that an application should be  
able to do, for obvious reasons.  The standard way of implementing  
this on UNIX systems is to use privilege separation and have a setuid  
root program performs the operations that require elevated privilege  
on behalf of the main program, via a simple interface.

David

On 26 Mar 2009, at 12:54, photocdn wrote:

> Hi, I'm working on a networking related app, that at time requires  
> elevated
> privileges to perform certain functions. I would like to prompt for  
> the
> super user password, and then authenticate and perform my function,  
> much
> like the SuSE setup tool Yast does, or when you are prompted for an
> administrator password when installing software on a Mac.
>
> I’m not aware of the techniques used to elevate an apps privileges,  
> so far
> I’m looking at Linux “capabilities” and libcap, but I’m not sure if  
> I’m on
> the right track, and if it would be portable to say BSD.
>
> Many thanks
> Cheers.
>
> --
> View this message in context: 
> http://www.nabble.com/Elevating-your-privileges-tp22721407p22721407.html
> Sent from the GNUstep - Dev mailing list archive at Nabble.com.
>
>
>
> _______________________________________________
> Gnustep-dev mailing list
> address@hidden
> http://lists.gnu.org/mailman/listinfo/gnustep-dev