Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the '10.7: Unlock screens using any admin password' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.7: Unlock screens using any admin password
Authored by: dhoit on Jan 24, '12 10:56:15AM
Be careful modifying the pam.d screensaver module. Apple fixed the issue with admins not being able to unlock the screen around 10.6.6 or so, and changing the pam module can result in /anyone/ being able to unlock your screen saver. Also, when modifying /etc/authorization, you should use the security tool. The man page is long, but has pretty good documentation of how to use it. In this case, you would do something like this:
security authorizationdb read system.login.screensaver > /path/to/temp.plist 
Edit the temp.plist with whatever tool you like, but ensure the plist is still valid using plutil afterwards. Use the security tool again to write the changes back to authorization. You will need to use sudo to edit the file.
sudo security authorizationdb write system.login.screensaver < /path/to/temp.plist 
---
--DH


[ Reply to This | # ]
10.7: Unlock screens using any admin password
Authored by: stevenzanko on Oct 31, '13 04:15:43PM
Has anyone gotten
security authorizationdb read system.login.screensaver
working with Mavericks? It seems to read the database and then write the modification back, but doesn't use the SecurityAgent even after reboot.

[ Reply to This | # ]