osx-config-check icon indicating copy to clipboard operation
osx-config-check copied to clipboard

Published 20 hours ago • verified publisher icon kristovatlas

decide how to deal with sudo/administrative issues

Open kristovatlas opened this issue 8 years ago • 2 comments

It's probably a good practice to mostly use a non-admin account, but the non-admin won't be able to change configurations unless at least added to the sudoers list. Need to decide how to resolve this catch-22.

kristovatlas avatar May 02 '16 23:05 kristovatlas

relevant: https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/9

kristovatlas avatar May 03 '16 20:05 kristovatlas

#4 partially resolved this by always trying to perform checks and implement fixes without sudoers rights. I think the next step is just to clarify the README to state that the script should be executed once per user. I may also want to output some direction to the user in the case that a config fix is user-specific && the fix requires admin rights && the user doesn't have admin rights; if there are any configs that match this pattern, I must weigh the risk of adding the user to the sudoers file vs. not having the desired configuration, or examine other options for escalating privileges other than sudo.

kristovatlas avatar May 19 '16 19:05 kristovatlas