Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the '10.7: Unlock screens using any admin password' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.7: Unlock screens using any admin password
Authored by: dhoit on Jan 24, '12 10:56:15AM
Be careful modifying the pam.d screensaver module. Apple fixed the issue with admins not being able to unlock the screen around 10.6.6 or so, and changing the pam module can result in /anyone/ being able to unlock your screen saver. Also, when modifying /etc/authorization, you should use the security tool. The man page is long, but has pretty good documentation of how to use it. In this case, you would do something like this:
security authorizationdb read system.login.screensaver > /path/to/temp.plist 
Edit the temp.plist with whatever tool you like, but ensure the plist is still valid using plutil afterwards. Use the security tool again to write the changes back to authorization. You will need to use sudo to edit the file.
sudo security authorizationdb write system.login.screensaver < /path/to/temp.plist 
---
--DH


[ Reply to This | # ]