An NSTask-like wrapper around AuthorizationExecuteWithPrivileges() in the Security API to run shell commands with root privileges in Mac OS X.
Created a long time ago. It has now been updated to support ARC and is available via CocoaPods.
// Create task STPrivilegedTask *privilegedTask = [[STPrivilegedTask alloc] init]; [privilegedTask setLaunchPath:@"/usr/bin/touch"]; NSArray *args = [NSArray arrayWithObject:@"/etc/my_test_file"]; [privilegedTask setArguments:args]; // Setting working directory is optional, defaults to / // NSString *path = [[NSBundle mainBundle] resourcePath]; // [privilegedTask setCurrentDirectoryPath:path]; // Launch it, user is prompted for password OSStatus err = [privilegedTask launch]; if (err != errAuthorizationSuccess) { if (err == errAuthorizationCanceled) { NSLog(@"User cancelled"); } else { NSLog(@"Something went wrong"); } } else { NSLog(@"Task successfully launched"); }
See Authorization.h for a list of possible error codes.
// ... launch task [privilegedTask waitUntilExit]; // Read output file handle for data NSFileHandle *readHandle = [privilegedTask outputFileHandle]; NSData *outputData = [readHandle readDataToEndOfFile]; NSString *outputString = [[NSString alloc] initWithData:outputData encoding:NSUTF8StringEncoding];
// ... launch task NSFileHandle *readHandle = [privilegedTask outputFileHandle]; [[NSNotificationCenter defaultCenter] addObserver:self selector:@selector(getOutputData:) name:NSFileHandleReadCompletionNotification object:readHandle]; [readHandle readInBackgroundAndNotify]; // ... - (void)getOutputData:(NSNotification *)aNotification { //get data from notification NSData *data = [[aNotification userInfo] objectForKey:NSFileHandleNotificationDataItem]; //make sure there's actual data if ([data length]) { // do something with the data // go read more data in the background [[aNotification object] readInBackgroundAndNotify]; } else { // do something else } }
You can observe STPrivilegedTaskDidTerminateNotification:
[[NSNotificationCenter defaultCenter] addObserver:self selector:@selector(privilegedTaskFinished:) name:STPrivilegedTaskDidTerminateNotification object:nil]; - (void)privilegedTaskFinished:(NSNotification *)aNotification { // do something }
Or alternately, set a termination handler:
privilegedTask.terminationHandler = ^(STPrivilegedTask *privilegedTask) {
NSLog(@"Terminating task: %@", [privilegedTask description]);
};AuthorizationExecuteWithPrivileges() is deprecated as of OS X 10.7 but remains available in OS X 10.11 El Capitan. Here's how you check if STPrivilegedTask works in the running version of OS X:
OSStatus err = [privilegedTask launch]; if (err == errAuthorizationFnNoLongerExists) { NSLog(@"AuthorizationExecuteWithPrivileges not available"); }
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above copyright
# notice, this list of conditions and the following disclaimer in the
# documentation and/or other materials provided with the distribution.
# * Neither the name of Sveinbjorn Thordarson nor that of any other
# contributors may be used to endorse or promote products
# derived from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
# DISCLAIMED. IN NO EVENT SHALL BE LIABLE FOR ANY
# DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
# (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
# LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
# ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
# SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.