Skip to content

@rtrouton rtrouton released this Mar 10, 2020 · 3 commits to master since this release

  • Fixed an issue where an unauthorized application could talk to the Privilege Helper tool (also partly addressed in 1.5.0.)
  • Fixed an issue where an unauthorized application could elevate privileges beyond what Privileges has been designed for (also addressed in 1.5.0.)
  • Further improved XPC security to make sure an unauthorized application cannot talk to the Privilege Helper tool.
  • Fixed an issue introduced in version 1.5.0 where the Dock Tile did not behave as expected if the key RequireAuthentication has been used.

Privileges 1.5.1 has been tested and verified to run on the following OS versions:

  • macOS 10.12.6
  • macOS 10.13.6
  • macOS 10.14.6
  • macOS 10.15.3

We would like to acknowledge the assistance of Csaba Fitzl (@theevilbit) with identifying vulnerabilities in previous versions of Privileges and verifying that they are resolved.

Assets 3

@rtrouton rtrouton released this Mar 2, 2020 · 9 commits to master since this release

Changes

  • The Privileges app is now sandboxed.
  • Added VoiceOver support to make the app accessible to people with visual impairments.
  • Added a managed preference key RequireAuthentication which makes Privileges require user authentication (password or TouchID) before granting admin rights.
  • Added the managed preference keys LimitToUser and LimitToGroup which allows to limit the usage of Privileges to a certain user or user group.
  • Added the managed preference keys ReasonRequired and ReasonMinLength. You may use these keys to ask the user for a reason for becoming an admin user (and specify a minimum number of characters the user must enter.)
  • Added a managed preference key RemoteLogging which allows to configure a remote syslog server, Privileges should send a log message to, whenever a user changes admin rights. No local forwarder needed.
  • Added a new argument --status to PrivilegesCLI what makes the tool return if the current user has admin rights or not.
  • Updated the icons to fit the Catalina icon appearance.
  • Privileges is now completely localized (even the menus and the preferences window).
  • Fixed an issue which allowed a user to bypass managed preference restrictions by running an older version of Privileges or PrivilegesCLI.
  • Fixed an issue that occurred if EnforcePrivileges has been set to none and made the app not work as expected.
  • Fixed an issue where an unauthorized application could talk to the Privilege Helper tool.
  • Fixed an issue where an unauthorized application could elevate privileges beyond what Privileges has been designed for.

Privileges 1.5.0 has been tested and verified to run on the following OS versions:

  • macOS 10.12.6
  • macOS 10.13.6
  • macOS 10.14.6
  • macOS 10.15.3
Assets 3

@rtrouton rtrouton released this Oct 30, 2019 · 14 commits to master since this release

Privileges 1.0.5 has been tested and verified to run on the following OS versions:

  • macOS 10.12.6
  • macOS 10.13.6
  • macOS 10.14.6
  • macOS 10.15.1

The new management options for Privileges 1.0.5 and later have also been tested and verified to work on the OS versions listed above.

Assets 3

@rtrouton rtrouton released this Jul 3, 2018 · 21 commits to master since this release

First release of Privileges.app as an open-source application.

Privileges 1.0.3 has been tested and verified to run on the following OS versions:

macOS 10.12.6
macOS 10.13.5
macOS 10.13.6
macOS 10.14.0 beta 2

Assets 3
You can’t perform that action at this time.