Changeset 23288

Timestamp:

07/02/07 09:29:12 (17 months ago)

Author:

zarzycki@…

Message:

<rdar://problem/5284661> Per-user agents run in root security context

Location:

trunk/launchd/src

Files:

• Makefile.am (modified) (1 diff)
• Makefile.in (modified) (1 diff)
• launchctl.c (modified) (2 diffs)

trunk/launchd/src/Makefile.am

@@ -41 +41 @@
 
 launchctl_CFLAGS = $(AM_CFLAGS) -I/System/Library/Frameworks/System.framework/PrivateHeaders
-launchctl_LDFLAGS = -framework CoreFoundation -framework IOKit -weak_library /usr/lib/libedit.dylib
+launchctl_LDFLAGS = -framework CoreFoundation -framework IOKit -framework Security -weak_library /usr/lib/libedit.dylib
 
 SystemStarter_CFLAGS = -mdynamic-no-pic $(AM_CFLAGS)

trunk/launchd/src/Makefile.in

@@ -247 +247 @@
 @LIBS_ONLY_FALSE@sysconf_DATA = hostconfig rc.common rc.netboot
 @LIBS_ONLY_FALSE@launchctl_CFLAGS = $(AM_CFLAGS) -I/System/Library/Frameworks/System.framework/PrivateHeaders
-@LIBS_ONLY_FALSE@launchctl_LDFLAGS = -framework CoreFoundation -framework IOKit -weak_library /usr/lib/libedit.dylib
+@LIBS_ONLY_FALSE@launchctl_LDFLAGS = -framework CoreFoundation -framework IOKit -framework Security -weak_library /usr/lib/libedit.dylib
 @LIBS_ONLY_FALSE@SystemStarter_CFLAGS = -mdynamic-no-pic $(AM_CFLAGS)
 @LIBS_ONLY_FALSE@SystemStarter_LDFLAGS = -framework CoreFoundation -framework IOKit

trunk/launchd/src/launchctl.c

@@ -23 +23 @@
 #include <CoreFoundation/CoreFoundation.h>
 #include <CoreFoundation/CFPriv.h>
+#include <Security/Security.h>
+#include <Security/AuthSession.h>
 #include <IOKit/IOKitLib.h>
 #include <NSSystemDirectories.h>
@@ -1554 +1556 @@
                 }
 
+                if (strcasecmp(session_type, "Background") == 0) {
+                        assumes(SessionCreate(sessionKeepCurrentBootstrap, 0) == 0);
+                }
+
                 assumes(load_and_unload_cmd(the_argc, load_launchd_items) == 0);
         }