Re:Hiding malware in Windows: The basics of code injection
by saagarjha on Friday September 21, 2018 @01:31PM
(#18041266)
That's consistent with I'm saying. You do not need to be root to attach to a process on macOS; you merely need to be part of the _developer group. I believe admins are added to this group by default, but you can do it manually if you wish. If you don't, you'll need to type the password of an admin user before you can debug anything.
[ Parent
| on HN ]
Re:Hiding malware in Windows: The basics of code injection
by blincoln on Friday September 21, 2018 @03:12PM
(#18041937)
Unfortunately, I don't have access to a machine to test with - my statement was based on a lengthy discussion from a few months ago at a previous job - but I'll assume you're correct, and amend my original statement to "Mac OS is the only mainstream OS I know of that disallows debugging by non-privileged user accounts entirely." Thanks :).