Descriptiongenerate_dump, exception_port_tool: set SecTaskAccess allowed.
This adds an Info.plist to these two tools that use task_for_pid().
Since they’re flat unbundled executables, the Info.plist must be placed
as a __TEXT,__info_plist section.
By setting SecTaskAccess to allowed and signing these tools with a
certificate trusted by the system, they will be allowed to use
task_for_pid() without requiring the invoking user to be root. This
provides an alternative to installing these tools as setuid root.
R=rsesek@chromium.org
Committed: https://chromium.googlesource.com/crashpad/crashpad/+/3ee656605175deccd14bf6a8d534f8ef55bc0003
Patch Set 1 #
Messages
Total messages: 4 (1 generated)
|