News for hackers. Stuff that matters.

A comment on Notarizing Your Mac Software for macOS Catalina. Parent comment

Re:Notarizing Your Mac Software for macOS Catalina by filleduchaos on Monday October 07, 2019 @09:40AM (#21180636)
> I purposefully make my primary account a non-administrator and elevate permissions with my administrator account when I need to perform administrative tasks

So...elevate permissions when you need to perform this new administrative task? I don't see how that changes the crux of the matter (you still are the de facto admin, even though you've applied artificial constraints to yourself, because you hold the admin credentials).

[ Parent | on HN ]
Re:Notarizing Your Mac Software for macOS Catalina by saagarjha on Tuesday October 08, 2019 @12:48AM (#21188861)
Arbitrary programs cannot use de facto credentials.
[ Parent | on HN ]
Re:Notarizing Your Mac Software for macOS Catalina by filleduchaos on Tuesday October 08, 2019 @08:58AM (#21191725)
...yes, they can? You're prompted to provide credentials (in some cases biometrics is fine, in others you must enter the password) if you/an application is trying to do something that requires escalated privileges.

Do you use macOS?

[ Parent | on HN ]
Re:Notarizing Your Mac Software for macOS Catalina by saagarjha on Tuesday October 08, 2019 @02:47PM (#21195669)
Right, but now you have explicit consent required to elevate to that level, whereas if you’re running as root already you can just silently do things without the user knowing.

> Do you use macOS?

Almost exclusively.

[ Parent | on HN ]