Re: packagemaker installs as non-admin
Re: packagemaker installs as non-admin
- Subject: Re: packagemaker installs as non-admin
- From: Jack Repenning <email@hidden>
- Date: Tue, 30 Oct 2007 17:02:53 -0700
On Oct 30, 2007, at 3:41 PM, Stéphane Sudre wrote:
On mardi, octobre 30, 2007, at 06:00 PM, Adam Fisk wrote:
> Am I missing something? Is there a way non-administrators can install
> any PackageMaker managed installer?
With a relocatable package, you can.
Unfortunately packages that are relocatable still try to put the receipt in /Library/Receipts, and they therefore fail on any non-administrator account.
The problem is not the location of the install, but only the attempt to put the receipt in /Library/Receipts.
Hmm, it works fine on my Mac (I'm using Jaguar for this test).
Sample package:
http://s.sudre.free.fr/files/test.tgz
When I change the default location to ~/, the file is correctly installed.
This does not seem like an adequate test: the file system permissions have been tweaked a lot since Jaguar. Also, you haven't specified much about the account as whom you are logged in.
On my fresh Leopard system, /Library/Receipts is writable by user "root" and group "admin". People configured in System Preferences as "Allow user to administer this computer" are in group "admin"; I believe this is what Adam meant by an "administrator account." Since they're in group "admin", they're able to write to the Receipts directory, even without further authentication or "sudo". Non-administrator accounts, however, aren't in "admin" and can't write to Receipts.
On my Tiger system, Receipts is writable by group "staff", but that could be from me monkeying about.
Sorry if I'm belaboring the obvious, but in the Jaguar experiment you just reported
- what groups is your account in? ("id -a" at the Terminal command line)
- what group may write to /Library/Receipts ("ls -ld /Library/Receipts")
|
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Installer-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden