Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
This commit adds a step to the start of the root_child_mac binary to harden the root_child_mac binary. Basically it's self-hardening The reason we do this is because (due to technical restrictions in .dmg files), we can't distribute a .dmg with a file that's owned by root. When the user first installs BusKill, the root_child_mac binary will be owned by their user. This isn't the worst thing in the world, and we do allow spawning a root_child process as root if it's owned by the current user. But, it's safer if it's owned by root:root, so we harden it the first time it launches. * #77 (comment)
- Loading branch information