search

macadmins / nudge

A tool for encouraging the installation of macOS security updates.
Apache License 2.0
985 stars 174 forks source link

PrivilegedHelper #35

Open erikng opened 3 years ago

erikng commented 3 years ago
  1. Would allow us to possibly help companies with standard users
  2. Would be required to fulfill https://github.com/erikng/NudgeSwift/issues/34
erikng commented 3 years ago

To use a privileged helper tool the application and helper has to be signed by a valid deverloper certificate.

erikng commented 3 years ago

will need https://github.com/erikng/NudgeSwift/issues/53

smithjw commented 3 years ago

This would be a great feature as half my users are Standard users. When there are critical OS Updates available we need a way to get users (Standard and Admin) to upgrade and using the same front-end would lead to a better UX overall.

abstertee commented 3 years ago

I've added the logic and code needed for a privileged helper in my forked version here: https://github.com/abstertee/NudgeSwift/tree/main/Nudge-Helper

But we still need an Apple Signing cert and some details from that cert that need to be entered in some of the files.

erikng commented 3 years ago

@abstertee was the privileged helper to run scripts as root? I've done some research on Privileged Helpers and I don't see how they would solve point 1 in this issue.

abstertee commented 3 years ago

@erikng yes, the idea is that the privileged helper runs the script commands as root. The helper would help companies with standard users because the helper tool runs with root privilege while the app runs under the user's context.

holzhannes commented 2 years ago

I like the Idea very much. Maybe it is possible to use the tool macOS-enterprise-privileges just to give the user the rights to do a upgrade. For updates it seems to work with standard user rights as well.

bradtchapman commented 4 months ago

@erikng : now that the executable is properly signed and notarized, and issue #53 is closed (you mentioned it here), can you implement anything like this? Is it still on your roadmap?

SupportApp by Root3.nl has implemented a PrivilegedHelper to execute scripts.