Authorization File Change Log (of sorts) & Archive

I’ve been playing with VMWare Fusion Snapshots and OS builds and have compiled a repository of original etc/authorization files incase you mess yours up.  Authorization File Archive.

And the correct permissions are: permissions

A few have asked if these posts are still valid for 10.8.x & I’d like to confirm Yes they are.  I decided to go back and look at each & compare them to find the changes throughout the OS builds in the etc/authorization files.

10.7.2 to 10.7.3  Just some new strings added in to support multiple new languages.


10.7.3 to 10.7.4 – A couple of new Keys were added, brief description below:

<key></key> (Probably allows you to set who can see passwords in Safari)

<string>This right is used by Safari to show passwords </string>

<key></key>  (Probably allows you to set who can repair libraries)

<string>__APPNAME__ is trying to repair your photo library.</string>

<key></key> (Not too sure)

<string>Modify Settings</string>


10.7.4 to 10.7.5 – No Changes


10.7.5 to 10.8 – Lots of Changes, Notes below.

<key></key> (To investigate) 


<string>Used by diskmanagementd to allow access to its privileged functions</string> (To investigate) 

<key></key>  appears to be exactly the same as <key>system.preferences.softwareupdate</key>  but new rule of   <string>root-or-entitled-admin-or-app-specific-admin</string>  (app-specific-admin seems to be new as well)

<key></key> (This replaced a Podcast Producer key, to investigate)

<key></key> (To investigate) 

<key></key> (To investigate) 

<key>system.preferences.nvram</key> (To investigate) 

<key></key> (Is now a USER rule)


New Keys (abbreviated)

<key></key> (Appears the same, To investigate) 

<string>For making change to network configuration via System Configuration.</string>

<key>system.volume.</key> (Not sure about this lot of volume related keys) 







<key>app-specific-admin</key> (New Rule type, To investigate) 








10.8 to 10.8.1 – No Changes


10.8.1 to 10.8.2 - Some Changes.






<string>Login mechanism based rule.  Not for general use, yet.</string>





<string>builtin:login-begin</string> (NEW, not sure of use)


<string>builtin:login-success</string> (NEW, not sure of use)


———  Updated : 22 July 2013  ———-


10.8.2 to 10.8.4 - A few new entries


<key></key>  (Described as: __APPNAME__ needs to repair your Library to run applications)



A couple of New Wifi Strings that look very useful

<string>For restricting WiFi control</string>
<string>Used by the WirelessDiagnosticsSupport framework to restrict XPC services provided by the wdhelper daemon</string>


About mattsmacblog

Mac Systems Administrator

Posted on February 19, 2013, in authorization, General, Mac, Mountain Lion, OS X 10.7 - Lion, OS X 10.8, Uncategorized and tagged , , , , , . Bookmark the permalink. 2 Comments.

  1. Hi,
    This was very helpful blog. Thanks for sharing the Authorization file archives. 🙂
    I have a question, in mac os x 10.8 the “system.privilege.taskport” key in the authorization file is “false” by default. How it will affect if I change it to “true”?

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: