Writing a privileged helper tool with SMJobBless()

by

XPC isn’t an option if you’re trying to elevate privileges (from https://developer.apple.com/library/archive/documentation/MacOSX/Conceptual/BPSystemStartup/Chapters/CreatingXPCServices.html):

By default, XPC services are run in the most restricted environment
possible—sandboxed with minimal filesystem access, network access, and
so on. Elevating a service’s privileges to root is not supported.

SMJobBless will install a helper tool and register it with Launchd, as in the SMJobBless example provided by Apple. The trick to getting your helper tool to actually launch is to simply attempt to connect to your helper tool’s advertised services.

There was a WWDC2010 example called ssd that demonstrated a simple launchd client/server model via sockets. It’s not available from Apple any longer, but I’ve found a link here: https://lists.apple.com/archives/macnetworkprog/2011/Jul/msg00005.html

I’ve incorporated the dispatch queue handling in the server code from the ssd example into the helper tool in the SMJobBless example and can confirm that my helper tool is indeed running (as root) when my main app attempts a connection on the appropriate port. See the WWDC2010 video on Launchd to understand the other mechanisms with which you can communicate with your helper tool (other than sockets).

I’m not sure I can legally redistribute the modified sources I have, but it should be fairly straightforward to merge the two projects and get your helper tool running.

Edit: Here is an example project I wrote that uses a distributed object for communication between the app and helper: https://www.dropbox.com/s/5kjl8koyqzvszrl/Elevator.zip

More Related Contents:

  1. View-based NSTableView with rows that have dynamic heights
  2. Can I use NSURLCredentialStorage for HTTP Basic Authentication?
  3. Difference between objectForKey and valueForKey?
  4. Best way to define private methods for a class in Objective-C
  5. Having trouble adding objects to NSMutableArray in Objective C
  6. How do I declare class-level properties in Objective-C?
  7. Picking a Random Object in an NSArray
  8. How to sort NSMutableArray using sortedArrayUsingDescriptors?
  9. Objective-C Introspection/Reflection
  10. NSString tokenize in Objective-C
  11. setValue:forUndefinedKey: this class is not key value coding-compliant for the key [duplicate]
  12. Rounding numbers in Objective-C
  13. Difference between self.var and simply var
  14. Save NSDictionary to plist
  15. Are classes objects in Objective-C?
  16. 2D arrays using NSMutableArray
  17. Gap above NSMenuItem custom view
  18. Core Data Predicate Date Comparison
  19. NSTask not picking up $PATH from the user’s environment
  20. Cocoa/Objective-C : Best Practice to parse XML Document?
  21. How can I determine if Apple methods are asynchronous?
  22. ObjC/Cocoa class for converting size to human-readable string?
  23. Class Foo is implemented in both MyApp and MyAppTestCase. One of the two will be used. Which one is undefined
  24. Getting a random object from NSArray without duplication
  25. Observe a File or Folder in Objective-C
  26. Check whether or not the current thread is the main thread
  27. NSString – Convert to pure alphabet only (i.e. remove accents+punctuation)
  28. Getting user’s default email address in Cocoa
  29. Looping using NSRange
  30. NSNumber of seconds to Hours, minutes, seconds

Leave a Comment