June 2006 - Installer-dev - lists.apple.com

Admin authorization vs Root authorization
by Perbix, Michael 26 Jun '06

26 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Thread-index: AcaZK/wrOuwmCwUfEdut7gANk3Ch3A== Thread-topic: Admin authorization vs Root authorization User-agent: Microsoft-Entourage/11.2.3.060209 _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: privilage exception raised during execution
by Mike Fischer 24 Jun '06

24 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Wrong, wrong, wrong! Assuming "some files" are inside your application package see above. Which is what is perfectly correct and intended to work that way. HTH Mike -- Mike Fischer Softwareentwicklung, EDV-Beratung Schulung, Vertrieb Web: <http://homepage.mac.com/mike_fischer/index.html> Note: I read this list in digest mode! Send me a private copy for faster responses. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… Am 24.06.2006 um 21:03 schrieb "narender pal singh panwar" <narendra.pal(a)gmail.com>: Hi I want to install my application such that every user on ther system should have Read & Write permission to my application's folder. I am writing to some files regularly during execution. The problem is when I installed application with one user and then login with other user account than privilage exception is raised. Is there any way to solve this problem. Yes, fix your application to only write to the approved directories (like ~/Library/Preferences or ~/Library/Application Support, their counterparts at /Library/... or /tmp (or even /var/... if you must) for example, depending on what type of information you're writing. There are a number of good reasons for this but one is that it may not even be possible to write to the application even with the correct permissions and authorization because the volume it's on is read only. Another is that two instances of your application might run on the same machine in different user contexts which will probably scramble the files you're writing to unless you are taking great care to ensure proper locking. A third is that standard users SHOULD not be able to modify your application for security reasons. Anybody who sets up a system to use standard (non-admin) users does this for a reason and you don't want to make their efforts be in vain. I'd throw out any app I'd catch violating these rules. This topic has been discussed numerous times on the Carbon-dev mailing list. Check out the archives for more good reasons and correct solutions to the problem. Hint: Use FSFindFolder() to find suitable directories for saving your data. This email sent to site_archiver(a)lists.apple.com

1 0

privilage exception raised during execution
by narender pal singh panwar 24 Jun '06

24 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type; b=duOC1qBh37IbuWjvHJsqgrl+YssWxaVkQzHHE/v/Ua1lxrRHNeWoFDhiM2mNY20hsmmXqpixpDdCNlhyL/43B4bbyuBNO39fGBRnBn1zuEphT1uLCsmYUt9ObOM4uy0HipTn5vKn+vjvciyrCll2T8dWmrH7Jk8qPEhhUq9ZZrU= _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: kernel extension
by Peter Bierman 24 Jun '06

24 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com -pmb _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… At 1:42 AM +0200 6/24/06, Mike Fischer wrote: Do you have any reference where this is documented? I'm not suggesting it's not a good idea but until now the only way I saw to get a kext loaded at boot time seemed to be to install it in /System/Library/Extensions. It never occured to me that a StartupItem might be used to load a kext. There are two basic types of kexts. IOKit kexts use IOKit to bind and match against the hardware found on the machine. They are loaded automatically based on their matching instructions. All other kexts have to be loaded by something. That's usually either your app or a startup process of some sort. This email sent to site_archiver(a)lists.apple.com

1 0

Re: PackageMaker not adding version.plist to BundleVersions.plist
by Rick Sustek 23 Jun '06

23 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Thanks! -Rick Begin forwarded message: On Jun 23, 2006, at 4:33 PM, Rick Sustek wrote: See: http://lists.apple.com/archives/xcode-users/2005/Nov/msg00771.html I'm getting the exact same problem! I'm running PackageMaker 2.1 (122) Sigh. Any info on this issue??? -- Scott Gruby Mark/Space, Inc. <http://www.markspace.com/> _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… I tried another machine, which has Xcode 2.3 installed, which sports PackageMaker version 2.1.1. It DID produce the expected contents in BundleVersions.plist, so I'd say this bug has been FIXED! From: Scott Gruby <sgruby(a)markspace.com> Date: June 23, 2006 4:33:45 PM PDT To: installer-dev(a)lists.apple.com Subject: Re: PackageMaker not adding version.plist to BundleVersions.plist This topic was posted by Daniel Jalkut, in Nov. 2005, but apparently went unanswered. Nothing I do can get the beast to pull in my version.plist file into the BundleVersions.plist file which gets created. The documentation clearly describes this process, but it doesn't reflect reality! While I haven't tested it, I have been told by DTS that this has been fixed in Xcode 2.3 (PackageMaker 2.1.1). Please visit <http://www.markspace.com/support/> for assistance with Mark/Space products. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/rick%40bias- inc.com This email sent to rick(a)bias-inc.com This email sent to site_archiver(a)lists.apple.com

1 0

Re: kernel extension
by Mike Fischer 23 Jun '06

23 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Am 23.06.2006 um 22:52 schrieb David A Rowland: OK. I thought so but it might have been the problem ;-) You're welcome. Glad to hear you've got it working now. Mike -- Mike Fischer Softwareentwicklung, EDV-Beratung Schulung, Vertrieb Web: <http://homepage.mac.com/mike_fischer/index.html> Note: I read this list in digest mode! Send me a private copy for faster responses. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… Am 23.06.2006 um 21:03 schrieb David A Rowland <rowlandd(a)sbcglobal.net>: StartupItems.plist Should be "StartupParameters.plist" I think. That's what I use. Right, my mistake in the email. So your kext bundle is actually installed inside the StartupItem? Why not in /System/Library/Extensions/ ? Apple strongly suggests the Library/StartupItems location for third party stuff. I'll follow the rules. Do you have any reference where this is documented? I'm not suggesting it's not a good idea but until now the only way I saw to get a kext loaded at boot time seemed to be to install it in /System/ Library/Extensions. It never occured to me that a StartupItem might be used to load a kext. Unless the kext is needed very early I guess it would work out fine that way though. Another thought is that StartupItems seem to be depreciated in favor of the launchd mechanism. As far as I understand launchd though, this particular way to use StartupItems is not easily converted into something launchd could work with. There was a long discussion about a similar topic on the Darwin-dev ML a couple of days ago. It turns out to have been a misspelling in my script, MyKext. With that fixed it does just what I want. Your comments here were very helpful. Thank you. This email sent to site_archiver(a)lists.apple.com

1 0

Re: PackageMaker not adding version.plist to BundleVersions.plist
by Scott Gruby 23 Jun '06

23 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com On Jun 23, 2006, at 4:33 PM, Rick Sustek wrote: See: http://lists.apple.com/archives/xcode-users/2005/Nov/msg00771.html I'm getting the exact same problem! I'm running PackageMaker 2.1 (122) Sigh. Any info on this issue??? -- Scott Gruby Mark/Space, Inc. <http://www.markspace.com/> _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This topic was posted by Daniel Jalkut, in Nov. 2005, but apparently went unanswered. Nothing I do can get the beast to pull in my version.plist file into the BundleVersions.plist file which gets created. The documentation clearly describes this process, but it doesn't reflect reality! While I haven't tested it, I have been told by DTS that this has been fixed in Xcode 2.3 (PackageMaker 2.1.1). Please visit <http://www.markspace.com/support/> for assistance with Mark/Space products. This email sent to site_archiver(a)lists.apple.com

1 0

PackageMaker not adding version.plist to BundleVersions.plist
by Rick Sustek 23 Jun '06

23 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com See: http://lists.apple.com/archives/xcode-users/2005/Nov/msg00771.html I'm getting the exact same problem! I'm running PackageMaker 2.1 (122) Sigh. Any info on this issue??? Thanks, -Rick _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This topic was posted by Daniel Jalkut, in Nov. 2005, but apparently went unanswered. Nothing I do can get the beast to pull in my version.plist file into the BundleVersions.plist file which gets created. The documentation clearly describes this process, but it doesn't reflect reality! This email sent to site_archiver(a)lists.apple.com

1 0

Re: kernel extension
by Stéphane Sudre 23 Jun '06

23 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com On vendredi, juin 23, 2006, at 08:44 PM, David A Rowland wrote: MyKext MyKext com.My.kext StartupItems.plist MyKext contains scripts to call kextload for the .kext drwxrwxr-t 54 root admin 1836 Dec 10 2005 Library drwxr-xr-x 6 root wheel 204 Feb 11 14:03 StartupItems drwxr-xr-x 10 root wheel 340 Feb 22 22:30 MyStartupItem drwxr-xr-x 3 root wheel 102 Nov 29 2005 MyKext.kext -rwxr-xr-x 1 root wheel 2662 Aug 9 2005 MyStartupItem -rw-r--r-- 1 root wheel 741 Aug 9 2005 StartupParameters.plist _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… I'm trying to make a kernel extension launch at boot time by placing a startup item in Library/StartupItems. I have followed all the rules, I think. The directory structure is: All the permissions have been set by PackageMaker and seem to be right -- root, wheel But it doesn't work. var/log/system.log seems to show a violation of permissions, but I'm not sure that is the problem. Is there a sample installation for kernel extensions that I could examine? If you're installing your kext in /Library/StartupItems, here is an example: Please note that on Mac OS X 10.2 (I don't remember if the fix was in 10.3 or only 10.4), you need to set the root:wheel permissions in the postflight script as Installer.app does not set them correctly. This email sent to site_archiver(a)lists.apple.com

1 0

Re: kernel extension
by Mike Fischer 23 Jun '06

23 Jun '06

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Am 23.06.2006 um 21:03 schrieb David A Rowland <rowlandd(a)sbcglobal.net>: I'm trying to make a kernel extension launch at boot time by placing a startup item in Library/StartupItems. I have followed all the rules, I think. The directory structure is: MyKext MyKext com.My.kext StartupItems.plist Should be "StartupParameters.plist" I think. That's what I use. All the permissions have been set by PackageMaker and seem to be right -- root, wheel Permissions for the StartupItem which work look like this: /Library/StartupItems/MyKext root:wheel 755 /Library/StartupItems/MyKext/MyKext root:wheel 754 /Library/StartupItems/MyKext/StartupParameters.plist root:wheel 644 Permissions for a kext which work in my case look like this: MyKext contains scripts to call kextload for the .kext But it doesn't work. var/log/system.log seems to show a violation of permissions, but I'm not sure that is the problem. What does the following command in a Terminal window show? kextload /System/Library/Extensions/MyKext.kext SystemStarter start "MyStartupService" HTH Mike -- Mike Fischer Softwareentwicklung, EDV-Beratung Schulung, Vertrieb Address: Bundesstrasse 9, D-20146 Hamburg, Germany Phone: +49 (0)40/45038886, Fax: +49 (0)40/45038887 _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… So your kext bundle is actually installed inside the StartupItem? Why not in /System/Library/Extensions/ ? /System/Library/Extensions/MyKext.kext root:wheel 755 /System/Library/Extensions/MyKext.kext/Contents root:wheel 755 /System/Library/Extensions/MyKext.kext/Contents/Info.plist root:wheel 644 /System/Library/Extensions/MyKext.kext/Contents/MacOS root:wheel 755 /System/Library/Extensions/MyKext.kext/Contents/MacOS/MyKext root:wheel 644 $ sudo SystemStarter start "MyKext" (assuming that "MyKext" is the service advertised in the StartupParameters.plist as "Provides") Is there a sample installation for kernel extensions that I could examine? I don't know. I do know that I have an installer which is able to install and load a StartupItem and a kext and activate both from its postflight script by doing this: This email sent to site_archiver(a)lists.apple.com

1 0