4.3. Checking Permissions from Scripts
The
pkcheck
utility, which checks whether a process is authorized for action, now supports a new format for parameters specified by the --process
option. This makes running pkcheck
safer by avoiding a race condition. The new format looks as follows: $
pkcheck --process pid,start-time,uid
Important
Do not use the bare
pid
or pid,start-time
formats for the --process
option. All scripts that invoke pkcheck
need to use the new format pid
,start-time
,uid
to avoid a race condition.
For more information, see the
pkcheck
(1) man page.