[launchd-dev] Mysterious problem with [NSURL getResourceValue:forKey:error:]

[James Bucanek]

> Quinn "The Eskimo!" <mailto:eskimo1 at apple.com>
> August 24, 2016 at 12:38 AM
> On 23 Aug 2016, at 17:53, James Bucanek<subscriber at gloaming.com>  wrote:
>
>> P.S. I would be nice if the UserName launchd property would also accept a number and interpret it as a UID:<key>UserName</key><integer>501</integer>.
>
> Yeah, that’s not really how launchd is architected.

That's OK. I sometimes find that launchd doesn't fit my needs. ;)

>> Each daemon is named after its user: com.qrecall.switchboard.501, com.qrecall.switchboard.502, and so on. Each user connects only with its switchboard, and that switchboard only manages endpoints belonging to that user.
>
> Hmmm, that’s weird.  How do you stop code running as user 502 connecting to the `com.qrecall.switchboard.501` service?  Presumable the daemon has a user ID check on its IPC.
Correct.

uid_t uid = (uid_t)connection.effectiveUserIdentifier;
if (uid==switchboard.userID || uid==0)
     return switchboard;
// Otherwise, block any attempts to connect with a switchboard belonging 
to another user
return nil;

> If you’re doing that anyway, you could just have one daemon that handles all users.
That was my original plan!

But it eventually got way too complicated, from an installation 
standpoint. The problem is that this process is only installed as a 
system daemon if the user has administrative privileges. If it's a 
non-admin account, or the user can't provide admin credentials, this 
process gets installed as per-user (background) agent. When switching 
back and forth between these two scenarios (privileged and 
non-privileged), the agent gets uninstalled and the daemon gets 
installed, or vice versa. But if there are multiple users, and I'm 
uninstalling the daemon, do I remove it or not (as there may be other 
users that still need the system daemon)? And what if different users 
are running different versions of the app? Which version of the system 
daemon should get installed? Etc., etc.

I might tackle these, and other problems, in the future. But for now, 
installing multiple system daemons, one for each user, was—by far—the 
most manageable solution.

James
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.macosforge.org/pipermail/launchd-dev/attachments/20160825/46a6a01d/attachment.html>