system.login.console section of Authorization Database is reset after upgrade

Originator:graham
Number:rdar://26836796 Date Originated:16 July 2016
Status:Open Resolved:
Product:OS C Product Version:10.12 DP1 16A201w
Classification: Reproducible:Yes
 
Summary:
The system.login.console section of the Authorization database is reset after an upgrade from 10.11.5, meaning any AuthorizationPlugins that have been configured won't run.

Steps to Reproduce:
1. Install an authorization plugin that also modifies the Authorization Database (for example https://github.com/grahamgilbert/crypt2) on 10.11.5
2. In Terminal, run security authorizationdb read system.login.console to ensure modifications have been made
3. Upgrade to macOS 10.12
4. Run security authorizationdb read system.login.console again to see modifications are removed.

Expected Results:
The modifications made to the authorization database should persist after an upgrade.

Actual Results:
The modifications made to the authorization database are removed.

Version:
10.12 DP1 16A201w

Notes:

Configuration:
This has happened on every upgrade performed so far, on all available test hardware.

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!