• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: Security framework question
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Security framework question


  • Subject: Re: Security framework question
  • From: Charles Bennett <email@hidden>
  • Date: Wed, 11 Jul 2001 12:23:07 -0400

Check out Scott Anguish's article at

http://www.stepwise.com/Articles/Technical/Packages/InstallerWoes.html

and more interesting, Part II of the saga.

http://www.stepwise.com/Articles/Technical/Packages/InstallerOnX.html

I have "verified" at least some of the problems, which is what is hanging up
the distribution of PowerGuardian. When I went to "upgrade", as part of a test
install, and was very surprised to discover that little directory named "System"
was missing, afterwards. (For the record, the only reason I was putting something in
/System was a serial port driver patch that needed to go in System/Library/Extensions)

I have pretty good backup's so this was merely annoying, but it caused me to take
Scott's route for the ssh installer, and roll my own.

Until I hear from Apple that the concern's in Scott's article's have been fixed,
I won't be using Installer for PG. It may be ok for installing just a .app
but for tool installation, where deleting the wrong directory will leave the system
in a "bad" state. I've lost confidence that it will at least "do no harm".

It wouldn't really do to install a program that will handle system shutdown during
power failures and have it make the system non-functional.. Kind of defeats the
purpose ;-)

chuck

[munched]

> I distributed pptp-gui 1.x as a Installer-package, and some people told me
> that it changed /Applications' permissions from rwxrwxr-x (775) to
> rwxr-xr-x (755) which removed the ability of admins to install something.
> This was partly my fault because I didn't set the proper permissions when
> I packaged the app.
> However, what if somebody has set his /Applications to 755, because he
> wanted it to be that way?
>
> Additionally, some people told me that installing a new version of
> pptp-gui over an old one removed /Applications, which is not really
> desirable.
> I switched over to the security framework ASAP (and now people complain
> that they have to enter the admin password every time :-/ ).
>
> andy
> --
> Description forthcoming.
> _______________________________________________
> cocoa-dev mailing list
> email@hidden
> http://www.lists.apple.com/mailman/listinfo/cocoa-dev

--
What parts of "shall make no law", "shall not be infringed",
and "shall not be violated" don't you understand?


References: 
 >Re: Security framework question (From: Andreas Monitzer <email@hidden>)

  • Prev by Date: Re: Continuous controls: detecting when the last message comes through
  • Next by Date: Re: Continuous controls: detecting when the last message comes through
  • Previous by thread: Re: Security framework question
  • Next by thread: Re: Security framework question
  • Index(es):
    • Date
    • Thread