Warning:

This repo is archived and the latest tool has been moved to https://github.com/Nikhil0487/privileges-CLI

PrivilegesCLI

A CLI tool to switch admin privileges for macOS. This is inspired from SAP's Privileges app.

About

This repository aims to build a CLI only tool to switch/toggle admin privileges.

Goals

This repository's goals are as follows:

1. CLI tool should run in user context,
2. Privilege operations should happen via XPC Mach service daemon,
3. The code should be fully in Swift,
4. Use Apple's new Argument Parser library,

Design

Proposed design:

1. Build a package with user CLI and XPC daemon,
2. Installing the package will start the deamon and install the CLI tool,
3. When the CLI is invoked, CLI asks XPC to do appropriate privilege change to the currently logged in user,
4. Uninstallation can also be done in user privilege if possible and make XPC to shut down itself

TODO

• Add Apple's collaboration framework to XPC daemon and check if its daemon safe,
• In client, add Apple's argument parser Swift package to parse CLI arguments,
• Test the functionality
• Package it in PKG format
• Add security to XPC daemon
• Add toggle option for specified duration to the admin privilege change

Usage

Build both XPC helper and privileges CLI tool.

1. Copy the com.privilge.helper XCP to /Library/PrivilegeHelper directory,
2. Load the XPC daemon plist,

./privilege --user "username" --admin true

Future Scope

• This tool can be extended to other privlege operations while staying as user,
• Some way to restrict only a set of users with some form of authorization (like password, codesign etc.) to be able to use this tool. This will be helpful when this tool is deployed in a managed environment.

Contributions are welcome.