Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Distributing with Permissions on OS X 10.2+



Rob Lockstone wrote:
| I'm not sure if this is relevant to this particular problem, but there 
| was a bug with some versions of Stuffit Expander, which is perhaps the 
| most commonly used extractor/expander program used on Macs, that did 
| not set the execute bit on executable files after being extracted 
| (apparently at the request of Apple). You can read more about it here:
| 
| http://support.allume.com/techsupport/qanda.php?id=534

I don't think that qualifies as a bug, as such. Since zip files don't contain *any* permissions information, it's entirely arbitrary whether the "execute" bit is set or not by the extracter. And, unless the extracter is given special knowledge of file types, *every* file extracted--executable, text file, image, folder, etc.--will be given the same permissions, whether those permissions make sense or not.

So which way do you set it? Allume initially chose to set "execute"; a reasonable choice, since doing so made extracted applications work. StuffIt 8 changed that: Apple asked that they leave the bit clear, *also* a reasonable choice, since doing so prevented malicious code from becoming executable without explicit approval by the user. The change back occurred because Mac users showed that they preferred convenience to security, and Allume heeded their wishes.

The real fix is to not use zip files, since the root problem is that they omit some vital metadata about the contained files.

Glen Fisher


 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Java-dev mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/java-dev/email@hidden

This email sent to email@hidden

References: 
 >Distributing with Permissions on OS X 10.2+ (From: Brad Johanson <email@hidden>)
 >Re: Distributing with Permissions on OS X 10.2+ (From: Rob Lockstone <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.