IMO the best way to do this is to have one of your global processes — the daemon or the system extension — manage these settings and then have clients use an IPC mechanism to request changes. The managing process can then authenticate those requests as it sees fit. If you use XPC as your IPC mechanism you can authenticate either the user (using Authorization Services, as shown by EvenBetterAuthorizationSample) or the client process (see here) or both. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic:
App & System Services
SubTopic:
Networking
Tags: