authbuddy - Introducing our new authorization rights tool for Mac OS X

We are pleased to announce the launch of authbuddy for Mac OS X. authbuddy lets system administrators edit the /etc/authorization file on Mac OS X without resorting to hand editing property list files.

DssW authbuddy is a command line tool for Mac OS X

DssW authbuddy is a command line tool for Mac OS X

The /etc/authorization file contains the rights available on your Mac. A right might include the ability to change the time zone or alter System Preferences. Each right has an associated level of authority needed to access that right. The bulk of declared rights require administrator privileges.

authbuddy provides a way for system administrators to edit these rights. There will only be a few who need authbuddy, but for those that do have the need, authbuddy will make life much easier and less risky.

Editing /etc/authorization can cause serious problems for a Mac. If the file is damaged or a right is set too causually, a Mac can be left open to abuse or misuse. It is best practice to avoid directly editing /etc/authorization. authbuddy provides a safer and indirect means of adjusting rights.

authbuddy is designed to be used in shell scripts and from the command line.

authbuddy is available immediately and is free, with our compliments.

Sample Rights in OS X 10.8

What rights are available on your Mac? OS X 10.8, aka Mountain Lion, includes the following rights:

  • com.alf
  • com.apple.
  • com.apple.AOSNotification.FindMyMac.modify
  • com.apple.CoreRAID.admin
  • com.apple.DiskManagement.
  • com.apple.DiskManagement.internal.
  • com.apple.DiskManagement.reserveKEK
  • com.apple.KerberosAgent
  • com.apple.OpenScripting.additions.send
  • com.apple.Safari.parental-controls
  • com.apple.Safari.show-passwords
  • com.apple.ServiceManagement.blesshelper
  • com.apple.ServiceManagement.daemons.modify
  • com.apple.SoftwareUpdate.modify-settings
  • com.apple.SoftwareUpdate.scan
  • com.apple.XType.fontmover.install
  • com.apple.XType.fontmover.remove
  • com.apple.XType.fontmover.restore
  • com.apple.Xcode.distcc.admin
  • com.apple.ZFSManager.
  • com.apple.activitymonitor.kill
  • com.apple.appserver.privilege.admin
  • com.apple.appserver.privilege.user
  • com.apple.builtin.confirm-access
  • com.apple.builtin.confirm-access-password
  • com.apple.builtin.generic-new-passphrase
  • com.apple.builtin.generic-unlock
  • com.apple.container-repair
  • com.apple.dashboard.advisory.allow
  • com.apple.desktopservices
  • com.apple.desktopservices.scripted
  • com.apple.docset.install
  • com.apple.dt.Xcode.MoveToTrashRights
  • com.apple.dt.instruments.process.analysis
  • com.apple.dt.instruments.process.kill
  • com.apple.familycontrols.loginwindow.override
  • com.apple.familycontrols.override
  • com.apple.library-repair
  • com.apple.lldb.LaunchUsingXPC
  • com.apple.opendirectoryd.linkidentity
  • com.apple.pcastagentconfigd.
  • com.apple.security.assessment.update
  • com.apple.server.admin.streaming
  • com.apple.trust-settings.admin
  • com.apple.trust-settings.user
  • com.apple.uninstalld.uninstall
  • com.apple.wifi
  • config.add.
  • config.config.
  • config.modify.
  • config.remove.
  • config.remove.system.
  • sys.openfile.
  • system.
  • system.burn
  • system.csfde.requestpassword
  • system.device.dvd.setregion.initial
  • system.disk.unlock
  • system.global-login-items.
  • system.hdd.smart
  • system.identity.write.
  • system.identity.write.credential
  • system.identity.write.self
  • system.install.app-store-software
  • system.install.apple-config-data
  • system.install.apple-software
  • system.install.software
  • system.keychain.create.loginkc
  • system.keychain.modify
  • system.login.console
  • system.login.done
  • system.login.screensaver
  • system.login.tty
  • system.preferences
  • system.preferences.accessibility
  • system.preferences.accounts
  • system.preferences.datetime
  • system.preferences.energysaver
  • system.preferences.location
  • system.preferences.network
  • system.preferences.nvram
  • system.preferences.parental-controls
  • system.preferences.printing
  • system.preferences.security
  • system.preferences.security.remotepair
  • system.preferences.sharing
  • system.preferences.softwareupdate
  • system.preferences.startupdisk
  • system.preferences.timemachine
  • system.preferences.version-cue
  • system.print.admin
  • system.print.operator
  • system.printingmanager
  • system.privilege.admin
  • system.privilege.taskport
  • system.privilege.taskport.debug
  • system.privilege.taskport.safe
  • system.restart
  • system.services.directory.configure
  • system.services.systemconfiguration.network
  • system.sharepoints.
  • system.shutdown
  • system.volume.
  • system.volume.external.
  • system.volume.external.adopt
  • system.volume.removable.
  • system.volume.removable.adopt

This article was posted in and tagged , and .

Published by Graham Miln on