Privileged HelperTool to execute purge on macOS
Use privileged HelperTool to execute purge
on macOS.
Note: You need to install purge
with Xocde or manually with xcode-select --install
.
When you call the plugin for the first time, the system prompt to install a new helper tool
If you accept, a background item is added to the system.
This means com.4D.purge.HelperTool
is added to /Library/PrivilegedHelperTools
.
Now you can start using the plugin command, which internally calls purge
via the helper tool.
property | type | description |
---|---|---|
helperToolPath | Text | |
purgePath | Text | |
proxyPath | Text | |
isHelperToolInstalled | Boolean | |
pid | Number |
purgePath
is searched by /usr/bin/which
helperToolPath
is searched in Library/PrivilegedHelperTools
The installer is lanched if !isHelperToolInstalled
.
Based on EvenBetterAuthorizationSample.
As explained here, it is imperative to run SMJobBlessUtil.py
before building the application. Do not update the project version, or the python script will fail.
python3 version: https://gist.github.com/mikeyh/89a1e2ecc6849ff6056b7391c5216799
The syntax is
SMJobBlessUtil.py setreq {app} {App-Info.plist} {HelperTool-Info.plist}
This updates SMPrivilegedExecutables
in App-Info.plist
and SMAuthorizedClients
in HelperTool-Info.plist
.
It seems SMJobBless
and launchd
reads Info.plist
of the main application, not of the plugin (which makes sense). The plugin uses a small app (hidden, LSBackgroundOnly
) to install the helper. The “installer” app displays a simple user interface if the argument --debug
is passed.
It seems like there is no easy way to call NSXPCConnection
or NSXPCInterface
from the plugin, especially if the plugin is reloaded without terminating the main application. As a workaround, a proxy console application is called each time to run purge
.