June 2006 - Installer-dev - lists.apple.com

Re: Mac OS X 10.4.7 & Relocatable packages
by Christopher Ryan 29 Jun '06

29 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Alright, I apologize, I was focusing on the wrong issue. Chris On jeudi, juin 29, 2006, at 08:19 AM, Christopher Ryan wrote: This has nothing to do with relocation. OK, I made the following tests on 10.4.7. In all cases: 1 Package IFPkgFlagRelocatable = true IFPkgFlagAuthorizationAction = None Permissions for the file is always set to 'root:admin' Case 1: IFPkgFlagDefaultLocation = '/' Archive contains ./Library/Fonts/A_new_file Case 2: IFPkgFlagDefaultLocation = '/' Archive contains ./Library/Fonts/An_existing_font Case 3: IFPkgFlagDefaultLocation = '/Library/Fonts/' Archive contains ./A_new_file Case 4: IFPkgFlagDefaultLocation = '/Library/Fonts/' Archive contains ./An_existing_font Still doesn't look like a bug? Problem ID #4605325 Example why this kind of situation is interesting: _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This is actually expected behavior for 10.4 (to some extent). It is unfortunate that it is causing you problems. Basically, in 10.3.9 the relocation behavior was slightly broken such that relocation did not work in Meta-Packages. MANY packages shipped in the world with relocation turned on for packages within a metapackage. On 10.4 those packages where relocating all sort of bits that shouldn't be relocated (Kexts, Frameworks, etc), so we basically had to make the decision that anything with a default location of /Library or /System have relocation off by default. This is not something we plan on fixing as there will be a number of things it breaks in the mean time. What you are trying to do is very common and we are looking into ways to do this better in the future. I believe the problem is that the user you are running as (and installing as because you have "None" for authentication doesn't have permissions to write this file in /Library/Fonts. If it worked in 10.3.9 it means that either the file you are installing didn't exist in 10.3.9 so your package happened to be able to install it or that /Library/Fonts has become more locked down since 10.3.9. Result: In the "Select Destination" pane, you can select a custom destination Result: In the "Select Destination" pane, you can select a custom destination Result: In the "Select Destination" pane, you CAN'T select a custom destination Result: In the "Select Destination" pane, you CAN'T select a custom destination I want to install a Preference Pane by default in /Library/ PreferencePanes but still let the user be able to select ~/Library/ PreferencePanes if he/she's not an admin. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Mac OS X 10.4.7 & Relocatable packages
by Stéphane Sudre 29 Jun '06

29 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com On jeudi, juin 29, 2006, at 08:19 AM, Christopher Ryan wrote: This has nothing to do with relocation. OK, I made the following tests on 10.4.7. In all cases: 1 Package IFPkgFlagRelocatable = true IFPkgFlagAuthorizationAction = None Permissions for the file is always set to 'root:admin' Case 1: IFPkgFlagDefaultLocation = '/' Archive contains ./Library/Fonts/A_new_file Case 2: IFPkgFlagDefaultLocation = '/' Archive contains ./Library/Fonts/An_existing_font Case 3: IFPkgFlagDefaultLocation = '/Library/Fonts/' Archive contains ./A_new_file Case 4: IFPkgFlagDefaultLocation = '/Library/Fonts/' Archive contains ./An_existing_font Still doesn't look like a bug? Problem ID #4605325 Example why this kind of situation is interesting: _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… I believe the problem is that the user you are running as (and installing as because you have "None" for authentication doesn't have permissions to write this file in /Library/Fonts. If it worked in 10.3.9 it means that either the file you are installing didn't exist in 10.3.9 so your package happened to be able to install it or that /Library/Fonts has become more locked down since 10.3.9. Result: In the "Select Destination" pane, you can select a custom destination Result: In the "Select Destination" pane, you can select a custom destination Result: In the "Select Destination" pane, you CAN'T select a custom destination Result: In the "Select Destination" pane, you CAN'T select a custom destination I want to install a Preference Pane by default in /Library/PreferencePanes but still let the user be able to select ~/Library/PreferencePanes if he/she's not an admin. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Mac OS X 10.4.7 & Relocatable packages
by Christopher Ryan 29 Jun '06

29 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com This has nothing to do with relocation. Chris Problem Summary --------------- Packages are no more relocatable on Mac OS X 10.4.7 Description ----------- The package IFPkgFlagRelocatable flag is set to true. No Authentication is required (ok, this is not clever but anyway...) Observed result --------------- Question -------- Is this a bug as I suppose it is or am I missing something? The bug was filed on Bug Reporter of course. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/ryanc%40apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… I believe the problem is that the user you are running as (and installing as because you have "None" for authentication doesn't have permissions to write this file in /Library/Fonts. If it worked in 10.3.9 it means that either the file you are installing didn't exist in 10.3.9 so your package happened to be able to install it or that /Library/Fonts has become more locked down since 10.3.9. Lets say you have a package which is installing a font in /Library/ Fonts/ (default destination). The destination can't be modified when the package is installed on Mac OS X 10.4.7. The destination can be modified when the package is installed on Mac OS X 10.3.9. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/ryanc% 40apple.com This email sent to ryanc(a)apple.com This email sent to ryanc(a)apple.com This email sent to site_archiver(a)lists.apple.com

1 0

Can I refer to files outside of a .pax archive?
by Nathan Herring 29 Jun '06

29 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Thread-index: AcabICACdhZLsqNbTrOcXE7CcHfycQ== Thread-topic: Can I refer to files outside of a .pax archive? It seems that the uncompressed option merely generates a very large .pax file in the resulting .pkg file. Is there a way to just have an package refer to bits already unpaxed? The idea here is that on the installation disc, there's a full installation that you can drag-n-drop, but if you really want to, you can run the installer. I'd prefer not to have to duplicate the data (one full set + one compressed set), but rather just have the installer refer to the files already layed out on the CD. -nh _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Mac OS X 10.4.7 & Relocatable packages
by Christopher Ryan 29 Jun '06

29 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Relocation should work. Can you send me a sample package and your install log? Thanks, Chris Problem Summary --------------- Packages are no more relocatable on Mac OS X 10.4.7 Description ----------- The package IFPkgFlagRelocatable flag is set to true. No Authentication is required (ok, this is not clever but anyway...) Observed result --------------- Question -------- Is this a bug as I suppose it is or am I missing something? The bug was filed on Bug Reporter of course. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/ryanc%40apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… Lets say you have a package which is installing a font in /Library/ Fonts/ (default destination). The destination can't be modified when the package is installed on Mac OS X 10.4.7. The destination can be modified when the package is installed on Mac OS X 10.3.9. This email sent to ryanc(a)apple.com This email sent to site_archiver(a)lists.apple.com

1 0

Mac OS X 10.4.7 & Relocatable packages
by Stéphane Sudre 28 Jun '06

28 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Problem Summary --------------- Packages are no more relocatable on Mac OS X 10.4.7 Description ----------- The package IFPkgFlagRelocatable flag is set to true. No Authentication is required (ok, this is not clever but anyway...) Observed result --------------- Question -------- Is this a bug as I suppose it is or am I missing something? The bug was filed on Bug Reporter of course. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… Lets say you have a package which is installing a font in /Library/Fonts/ (default destination). The destination can't be modified when the package is installed on Mac OS X 10.4.7. The destination can be modified when the package is installed on Mac OS X 10.3.9. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Admin authorization vs Root authorization
by Perbix, Michael 27 Jun '06

27 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Thread-index: AcaZK/wrOuwmCwUfEdut7gANk3Ch3AAwTnnq Thread-topic: Admin authorization vs Root authorization User-agent: Microsoft-Entourage/11.2.3.060209 _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Admin authorization vs Root authorization
by Rick Sustek 27 Jun '06

27 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Admin authorization vs Root authorization
by Mike Fischer 26 Jun '06

26 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Am 26.06.2006 um 21:02 schrieb "Perbix, Michael" <PERBIX(a)lmsd.org>: HTH Mike -- Mike Fischer Softwareentwicklung, EDV-Beratung Schulung, Vertrieb Web: <http://homepage.mac.com/mike_fischer/index.html> Note: I read this list in digest mode! Send me a private copy for faster responses. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… I have a meta-package with several components, one of which is a preference file being put into a local user account. When I use ROOT AUTH required (making the package with Iceberg) and choose the preferences folder as the default install spot, it modifies the permissions on the folder. How do you get Iceberg to build a package that will place anything into a local user account? I don't think that is a supported thing to do in installer packages at the moment. I hope you're not hard-coding your short username into the base path of an installer package? Usually the only way to install things into a local user account is by using something like a postflight script to put it there. Get the package to install to some temporary place then use the script to move the installed files to the user folder and correct the owner and permission info as necessary. As for setting the permissions, you set them on the files when you build your file structure in Iceberg. If you set the wrong permissions then those will be installed. Or did I miss something here? I know this is a bug (or perhaps design) of the installer...but how can I force authentication of a package without the path getting munged like that? Would Admin Auth be a better choice? Probably not. Having root (or admin) rights should enable the installer to install anything with whatever permissions you specified. I am also installing a kernel extension, so that causes authentication for the whole metapackage....by not requiring authentication on the other components, they all install correctly. As an aside: admin authorization seems to be enough for installing a kernel extension. But apart from that I don't know how to deal with differing authorization requirements in the subpackages of a metapackage. I'd assume that having too much authorization would not hurt the installation process in any way. (It might only be a security risk.) You can get the real uid and gid of the user who is installing your package using the SUDO_UID and SUDO_GID environment variables in the postflight script (and probably other scripts as well) when those scripts are executed as root due the admin or root authentication. This may help in finding the current local user home as well as the necessary permissions for files and folders installed there. What is the best manner in which to do this...I am designing custom software installs of all our used software with all customizations and preferences...I install the apps, support files, and preferences (to the template, and 2 local users). So you are not looking at a general solution? I take it that you have a lab situation where multiple machines have the exact same users? In that case hard-coding paths to user home directories might be possible. But I haven't tried what happens. If there is a problem IMHO it's probably not with Iceberg (or any other tool used to build the packages) but with the Installer.app unpacking your archive. This email sent to site_archiver(a)lists.apple.com

1 0

Re: privilage exception raised during execution
by Mike Fischer 26 Jun '06

26 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Am 26.06.2006 um 11:27 schrieb narender pal singh panwar: That's good. Is this a question? Mike [snip] _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… Hi I am clear with the idea that all user data must be written to the approved directories (like ~/Library/Preferences or ~/Library/Application Support. now I also have to write uninstaller which is effectively able to remove all files that was installed by my installer do i still nees read & write permission's to remove the files. Assuming that it is then I'm not sure exactly what you're asking? Please explain. On 6/26/06, installer-dev-request(a)lists.apple.com < installer-dev- request(a)lists.apple.com> wrote: Send Installer-dev mailing list submissions to installer-dev(a)lists.apple.com PS. Please make sure you have a reasonable subject in your messages and please also quote only the relevant bits not the entire digest when answering. Using "Re: Installer-dev Digest, Vol 22, Issue 22" as the subject just doesn't cut it. -- Mike Fischer Softwareentwicklung, EDV-Beratung Schulung, Vertrieb Web: <http://homepage.mac.com/mike_fischer/index.html> Note: I read this list in digest mode! Send me a private copy for faster responses. This email sent to site_archiver(a)lists.apple.com

1 0