Post

Replies

Boosts

Views

Activity

[macOS] Checking admin privileges with Touch ID???
I'm trying to figure out whether it's possible to authenticate a user as an admin using Touch ID on macOS. And Using _public_ APIs (*)Basically, what I'm trying to achieve is:1. User clicks on a button to perform a task that can only performed by a user who is allowed to administer the computer.2. A standard security authentication dialog appears and allows to authenticate using Touch ID.3. A AuthenticationRef is retrieved.When I look at the Local Authentication API, I see multiple limitations (by design or not):- it lets you prove you are the current user. But it does not check that you are an admin user.- the dialog does not work as the one in Installer.app for instance: . if you move the authentication dialog to a screen corner and then click the User Password… button, the Password window is displayed on the center of the screen.- it does not seem possible to retrieve a AuthorizationRef.QuestionAre there public API or services that allows to check for admin privileges which support Touch ID?* I know it's possible using private frameworks since this for instance what the Startup Disk preference pane does.
3
0
2.1k
Apr ’21
SecCodeCheckValidityWithErrors returns -67030 on OS X 10.9/10.10
Is there a known bug/limitation with the SecCodeCheckValidityWithErrors on OS X 10.9/10.10 when it comes to checking the validity of an app in the following case: the application A.app is a bundle. inside Ap.app/Contents/MacOS there is an additional binary B. B is launched by launchd and runs an XPC mach service. A is a client of this XPC mach service. When A tries to connect to B, B checks the calling process with SecCodeCheckValidityWithErrors. On OS X 10.9/10.10, SecCodeCheckValidityWithErrors returns -67030 (errSecCSInfoPlistFailed / invalid Info.plist (plist or signature have been modified)). On OS X 10.11 and later, SecCodeCheckValidityWithErrors succeeds. If a copy of B is installed outside of the A.app bundle and it's this copy that launchd starts, A can communicate with B. [Q] Was there a bug in OS X 10.9/10.10 where SecCodeCheckValidityWithErrors would return -67030 if the XPC server is inside the MacOS folder of the XPC client?
1
0
827
Apr ’21
NSProgressIndicator: How do you switch from a determinate progress indicator to the Cylon indeterminate progress indicator?
I'm observing something unexpected in macOS Big Sur: If I have an indeterminate progress (bar) indicator, the animation is the Cylon one. If I have a determinate progress (bar) indicator and I set it to be indeterminate (through the appropriate property), the animation is a pulse/throb. Even if I set the min,double,max value to 0. Is it no more possible to alternate between determinate and indeterminate in macOS Big Sur?
1
1
1.2k
Aug ’21