4.3. Checking Permissions from Scripts
pkcheckutility, which checks whether a process is authorized for action, now supports a new format for parameters specified by the
--processoption. This makes running
pkchecksafer by avoiding a race condition. The new format looks as follows:
pkcheck --process pid,start-time,uid
Do not use the bare
pid,start-timeformats for the
--processoption. All scripts that invoke
pkcheckneed to use the new format
uidto avoid a race condition.
For more information, see the
pkcheck(1) man page.