Root access without password.

Question

Level 1

54 points

Root access without password.

Hi.

I notice that Sublime Text, which is a simple application, has root access privileges. It can modify and save .plist files that are in Library directory and have read/write access ONLY for System. Sublime Text modifies these files without even asking the password!

Other applications, like Xcode or PlistEdit Pro are not able to modify these files.

Is it a serious security but or what is going on? How Sublime Text can have these elevated access rights when it is just a simple application installed by dragging it to applications folder (this process does not even require password)?

Thanks.

Posted on Feb 20, 2023 10:16 PM

Reply

Answer 1

Top-ranking reply

MartinR

Level 7

24,342 points

Feb 22, 2023 6:45 AM in response to ron App

Sublime Text, which is a simple application, has root access privileges..

I doubt that is the case. /Library is not a single, unified folder. It is a combination of multiple folders & files, some of which are writeable, some of which are not.

What appears in the Finder as a single /Library folder having r/w access only for System is actually a combination of multiple folders, some of which are located in the Data volume and are writeable, some of which are located in the System volume and are not. Those underlying folders are all firmlinked together and presented as a single /Library folder in the Finder.

Reply

Answer 2

Feb 22, 2023 7:28 AM in response to ron App

In addition to the /Library folder at top-level, there is also a Library folder for each user, located at:

~/Library

where tilde [~] is an active shorthand for 'current user'.

which folder are you writing in?

Reply

Answer 3

Owl-53

Level 10

103,039 points

Feb 21, 2023 7:32 AM in response to ron App

It is suggested, the Only Way the User or an application can have been given Root Access is if the the User Purposefully enable and is using the Super User ( Root ) account on this computer

Refer to another link below

How to enable the root user or change the root password on Mac - Apple Support (CA)

Reply

Answer 4

Owl-53

Level 10

103,039 points

Feb 21, 2023 7:50 AM in response to ron App

Do any of the below listed applications look familiar and used on this computer ?

Any Third Party Applications that will interfere with the normal operation of the OS, is an invitation for disaster and comprising the Operating System

Certain Applications maybe available on the Apple Apps Store - this only means the Developer is prepared to pay Apple a portion on each sale. What the Application may do to the computer is up to the User to check this out before purchase

Any of the below should be removed as per Developers Instructions

1 - Disk Cleaner

This will include CleanMyMac , aka “ BrickMyMac “

Or better still ➡️

Download the Application Etrecheck directly from the Developer.

This is a Diagnostic Tool that makes no changes to the computer.

It makes a coherent and readable inventory of both the Hardware and Software used on the computer

The application is free or paid from added features.

The Report will Not Reveal Any Personal Information.

Post back the Full Report - copy and paste - >>>> using the Additional Text Icon ( 3rd Icon to last ) <<<<

We can have a look at the report for possible issues and may have possible suggestions to resolve the issues

Reply

Answer 5

ron App Author

Level 1

54 points

Feb 21, 2023 7:25 AM in response to Owl-53

Thank you for the answer, but I am not able to understand how it might be related to my question.

Are you suggesting that article you linked somehow justifies a simple application being able to modify protected system files (write access for “system” only)?

Reply

Answer 6

ron App Author

Level 1

54 points

Feb 21, 2023 7:46 AM in response to Owl-53

Ok, I think I am familiar with what articles say, it is how it SHOULD be.

I am explaining the situation where things are apparently NOT happening in the way it should be - an application installed by simple dragging it to application folder can modify system files that should ONLY be accessible through elevated privileges.

My question was - why an application can have such elevated rights that other applications like text edit, xcode, plistedit pro do not have. Articles you linked do not appear to answer that.

Reply