Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
Re: More on daemon install and permissions/owner checks
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: More on daemon install and permissions/owner checks




On Aug 19, 2010, at 9:34 PM, Monte Benaresh wrote:


Hi All,

I don't mean to beat a dead horse, but we are close to deciding what to do when our preflight script finds wrong permissions or owner when checking /Library/PrivilegedHelperTools/ and it's parents. Here are the remaining questions we have boiled down to:

1. Should we just aspire to the same degree of permissions/owner repair that Disk Utility does, i.e., not care about the owner on "/"? BTW, DU does not fix a bad owner or permissions of /Library/ PrivilegedHelperTools/. I know some of you have said that DU should fix the owner of "/".

Disk Utility is not always the most clever guy in the room: e.g. CVE-2008-2324 .


IMHO, the reference is what the boms of the OS install disks say (plus the security fixes introduced by minor OS updates and security updates). So if the boms say '/' should be root/admin, just consider it should be root/admin.


_______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: This email sent to email@hidden
References: 
 >More on daemon install and permissions/owner checks (From: Monte Benaresh <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2011 Apple Inc. All rights reserved.