Re: More on daemon install and permissions/owner checks
Re: More on daemon install and permissions/owner checks
- Subject: Re: More on daemon install and permissions/owner checks
- From: Iceberg-Dev <email@hidden>
- Date: Thu, 19 Aug 2010 23:51:18 +0200
On Aug 19, 2010, at 9:34 PM, Monte Benaresh wrote:
Hi All,
I don't mean to beat a dead horse, but we are close to deciding
what to do when our preflight script finds wrong permissions or
owner when checking /Library/PrivilegedHelperTools/ and it's
parents. Here are the remaining questions we have boiled down to:
1. Should we just aspire to the same degree of permissions/owner
repair that Disk Utility does, i.e., not care about the owner on
"/"? BTW, DU does not fix a bad owner or permissions of /Library/
PrivilegedHelperTools/. I know some of you have said that DU
should fix the owner of "/".
Disk Utility is not always the most clever guy in the room: e.g.
CVE-2008-2324 .
IMHO, the reference is what the boms of the OS install disks say
(plus the security fixes introduced by minor OS updates and security
updates). So if the boms say '/' should be root/admin, just consider
it should be root/admin.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Installer-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden