Re: Flat package installer-plug in permissions issue
Re: Flat package installer-plug in permissions issue
- Subject: Re: Flat package installer-plug in permissions issue
- From: Stephane Sudre <email@hidden>
- Date: Thu, 26 Apr 2012 00:12:06 -0700
On Wed, Apr 25, 2012 at 3:43 PM, Tony Zepeda <email@hidden> wrote:
> Hi,
> Since a digital signature is now required for 10.8 PackageMaker installers, I've converted a PackageMaker bundle installer in to its flat-file equivalent. The flat-file equivalent mostly seems OK except for one major problem: when the installer plug-in is executed (this installer has two installer plug-ins), the installer plug-in is no longer executed with Admin privileges.
>
> The original PackageMaker bundle installer got Admin privileges, executed the installer plug-in with Admin privileges and the installation was a success. The new flat-file installer gets Admin privileges, executes the installer plug-in with NON-Admin privileges and the installation is botched (because the plug-in without elevated privileges no longer has access to certain locations such as the /Applications folder).
>
> Does anyone have insight in to this? I'm sure someone else has encountered this. I haven't completely resolved this issue but this almost seems like a bug with the PackageMaker flat-file format.
If an Installer plugin ever got Admin privileges (assuming you mean
root), it is/was a security flaw. The code of an installer plugin
should be run with the same exact privileges the Installer.app has.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Installer-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden