Security-57740.60.18.tar.gz

[apple/security.git] / OSX / authd / authorization.plist

diff --git a/OSX/authd/authorization.plist b/OSX/authd/authorization.plist
index 9b798966664655f31063473f1c11bd4683b40e04..d7cef74ff50243ccb8437ab346802c1dcc818200 100644 (file)
--- a/OSX/authd/authorization.plist
+++ b/OSX/authd/authorization.plist
@@ -484,6 +484,10 @@ See remaining rules for examples.
                        <true/>
                        <key>timeout</key>
                        <integer>0</integer>
+                       <key>password-only</key>
+                       <true/>
+                       <key>version</key>
+                       <integer>1</integer>
                </dict>
                <key>com.apple.library-repair</key>
                <dict>
@@ -1497,6 +1501,18 @@ See remaining rules for examples.
                    <key>rule</key>
                    <string>authenticate-session-owner</string>
                </dict>         
+               <key>com.apple.security.sudo</key>
+               <dict>
+                       <key>class</key>
+                       <string>rule</string>
+                       <key>k-of-n</key>
+                       <integer>2</integer>
+                       <key>rule</key>
+                       <array>
+                               <string>entitled</string>
+                               <string>authenticate-session-owner</string>
+                       </array>
+               </dict>         
                <key>system.localauthentication.ui</key>
                <dict>
                        <key>class</key>
@@ -1519,6 +1535,19 @@ See remaining rules for examples.
                                <string>authenticate-staff-extract-context</string>
                        </array>
                </dict>
+               <key>com.apple.safaridriver.allow</key>
+               <dict>
+                       <key>comment</key>
+                       <string>This right is used by safaridriver to allow running it.</string>
+                       <key>class</key>
+                       <string>user</string>
+                       <key>group</key>
+                       <string>admin</string>
+                       <key>allow-root</key>
+                       <true/>
+                       <key>shared</key>
+                       <true/>
+               </dict>
        </dict>
        <key>rules</key>
        <dict>