Name: Privileges
Price: Free
Rating: 5 (1 reviews)

Privileges overview

Privileges is an application that allows users to work as a standard user for day-to-day tasks, by providing a quick and easy way to request administrator rights. Users can set a timeframe in the application’s settings to perform specific tasks, such as installing or removing an application. To request admin rights, simply click on the Privileges icon in your Dock. Command line use is supported as well.
Working as standard user instead of an administrator adds another layer of security to your Mac and is considered a security best practice. We believe all users, including all developers, can benefit from using Privileges.

What’s new in version 2.3.0

mTLS is now supported for webhooks. So if you configure your web server to require a client certificate, Privileges will present it if it's found in one of the keychains. Please make sure PrivilegesAgent has access to the corresponding private key to avoid being prompted for access. If you want to learn more about mTLS, I highly recommend our colleague Henry Stamerjohann's session "What about mutual TLS?" from the 2021 MacSysadmin conference.
Managed settings are now clearly marked as managed as you know it from System Settings.
For those who don't like notifications, a new management key RenewalCustomAction has been added, that allows you to run a script or binary before administrator privileges expire. So you can inform your users with a dialog or whatever works best in your environment. Please see the Wiki for detailed information about the new key.
Privileges now notices when privileges are changed by another process. To do this, it includes a new daemon called PrivilegesWatcher. The daemon is started whenever the file /var/db/dslocal/nodes/Default/groups/admin.plist is changed. It notifies the PrivilegesAgent of the change, and the agent then determines whether the change was expected or not. Unexpected changes are logged and the UI of all Privileges components are updated to reflect the change. The log message will look like this: “SAPCorp: Administrator privileges for user xxxx have been changed by another process”
Added some code to verify group membership after changing it.
PrivilegesCLI got a new command line argument -v or --version which displays version information.
The syslog code has been rewritten and improved. Now syslog messages can also be sent using octet counting (instead of just non-transparent framing). In addition to this you can now include structured data elements in your syslog message. To configure all this, we introduced the new management keys MessageFormat and StructuredData. Please see the Wiki for detailed information about these new keys.
Fixed some minor issues.

Privileges for Mac

Privileges overview

What’s new in version 2.3.0

Privileges for Mac

Write your thoughts in our old-fashioned comment

(0 Reviews of Privileges)