adminauthorization_mac.cpp

 
#include "adminauthorization_p.h"
 
#include <QtCore/QStringList>
#include <QtCore/QVector>
 
#include <Security/Authorization.h>
#include <Security/AuthorizationTags.h>
#include <unistd.h>
 
using namespace RabbitCommon;
 
bool CAdminAuthorization::hasAdminRights()
{
    return geteuid() == 0;
}
 
bool CAdminAuthorization::executeAsAdmin(const QString &program, const QStringList &arguments)
{
    AuthorizationRef authorizationRef;
    OSStatus status = AuthorizationCreate(NULL, kAuthorizationEmptyEnvironment,
        kAuthorizationFlagDefaults, &authorizationRef);
    if (status != errAuthorizationSuccess)
        return false;
 
    AuthorizationItem item = { kAuthorizationRightExecute, 0, 0, 0 };
    AuthorizationRights rights = { 1, &item };
    const AuthorizationFlags flags = kAuthorizationFlagDefaults | kAuthorizationFlagInteractionAllowed
        | kAuthorizationFlagPreAuthorize | kAuthorizationFlagExtendRights;
 
    status = AuthorizationCopyRights(authorizationRef, &rights, kAuthorizationEmptyEnvironment,
        flags, 0);
    if (status != errAuthorizationSuccess)
        return false;
 
    QVector<char *> args;
    QVector<QByteArray> utf8Args;
    for(auto argument : arguments) {
        utf8Args.push_back(argument.toUtf8());
        args.push_back(utf8Args.last().data());
    }
    args.push_back(0);
 
    const QByteArray utf8Program = program.toUtf8();
    status = AuthorizationExecuteWithPrivileges(authorizationRef, utf8Program.data(),
        kAuthorizationFlagDefaults, args.data(), 0);
 
    AuthorizationFree(authorizationRef, kAuthorizationFlagDestroyRights);
    return status == errAuthorizationSuccess;
}