Sandboxed app with Helper app

Question

I'm trying to execute helper app from sandboxed application, but its throwing error errAuthorizationDenied (-60005), I'm using Apple SMJobBless as example. Currently I have this

var authItem: AuthorizationItem = AuthorizationItem(name: kAuthorizationRightExecute, valueLength: 0, value: nil, flags: 0)
var authRights: AuthorizationRights = AuthorizationRights(count: 1, items: &authItem)
let authFlags: AuthorizationFlags = AuthorizationFlags.ExtendRights
var result = false
var authRef: AuthorizationRef = nil

let status: OSStatus = AuthorizationCreate(&authRights, nil, authFlags, &authRef)
if status == errAuthorizationSuccess {
    result = SMJobBless(kSMDomainSystemLaunchd, "**helperBundleIdentifier**", authRef, nil)
}

Am I doing something wrong, or it isn't possible in sandbox?

Is your helper sandboxed as well? That sample code is from 10.6 when sandboxing didn't exists — Marek H, Oct 06 '15 at 22:22

score 6 · Accepted Answer · answered Oct 06 '15 at 22:26

6

From Sandboxing guide

The following app behaviors are incompatible with App Sandbox:

Use of Authorization Services

answered Oct 06 '15 at 22:26

Marek H

5,173
3
31
42

score 1 · Answer 2 · answered Oct 28 '21 at 09:00

1

Even if you weren't sandboxed, the code you wrote will fail because kAuthorizationRightExecute is the wrong right to be requesting authorization for. You need to request for kSMRightBlessPrivilegedHelper.

answered Oct 28 '21 at 09:00

Joshua Kaplan

843
5
9

This is the correct answer. kAuthorizationRightExecute is not for installing a helper tool. – kakaiikaka Dec 03 '21 at 00:59

Sandboxed app with Helper app

2 Answers2