on 2008-07-02 5:59 AM, Stephane Sudre at email@hidden wrote:
> Let's imagine I sign a Cooca application.
>
> I then package it into a .pkg package (using PackageMaker). This will
> remove Finder Info (and .DS_Store and CVS or SVN related metadata).
>
> Is the application still correctly signed after that?
I tested that with PackageMaker 3.0.1 a couple of days ago, and it was fine.
After running my installer to install my product, I used codesign -vv <path>
on the installed app package and some things inside it that I sign
separately, and all returned "valid on disk" (or something similar).
I was curious, because my installer includes a script that changes the owner
and permissions on an embedded Cocoa helper app package at the root level of
my product's Contents folder, and of course this change is made after the
embedded app package was signed.
I think I saw something in the documentation that said changing permissions
is ok, but I don't recall where I saw it. Of course it would have to be OK,
as would all of the things you ask about. Otherwise, code signing wouldn't
be a viable technology on Mac, because changing ownership and permissions on
some things inside an app package is sometimes required, as is removing the
Finder Info. Furthermore, for a year now Apple's official position has been
that application packages are the preferred way to install all Mac
applications (so stated at the beginning of the PackageMaker User guide
(July 2007)).
You will be able to actually test my installer today or tomorrow, when
PreFab Event Taps Testbench 1.1 goes up at
<http://prefabsoftware.com/eventtapstestbench/>. In fact, I would appreciate
it if you would test it, and let me know if I screwed anything up.
--
Bill Cheeseman - email@hidden
Quechee Software, Quechee, Vermont, USA
www.quecheesoftware.com
PreFab Software - www.prefabsoftware.com
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Apple-cdsa mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/apple-cdsa/email@hidden
This email sent to email@hidden
