Yes, dragging the application there requires admin rights, but it doesn't grant ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		TazeTSchnitzel on Aug 3, 2016 \| parent \| context \| favorite \| on: Classic Shell hacked with compromised update that ... Yes, dragging the application there requires admin rights, but it doesn't grant those to the app itself.

pritambaral on Aug 3, 2016 [–]

What if the app had an suid binary?

Disclosure: I'm not a mac user, and never have been one long enough to mess around with /Applications.

TazeTSchnitzel on Aug 3, 2016 | [–]

It would run as your user. The files there aren't owned by root.

Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact