December 2009 - Installer-dev

RE: Access to /usr/local from installer plug-in
by Stanislav Kolar 10 Dec '09

10 Dec '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Importance: Normal Thank you for the responses. So do you think that there is no way to elevate rights to "root" somewhere in my Installer plug-in ? (In the "shouldExitPane" method, for example) Stanislav Kolar Research & Development ................................................................. Kerio Technologies Anglicke nabrezi 1, 301 49 Plzen Czech Republic tel. 377 338 901, fax 377 338 921 www.kerio.com ................................................................. Connect. Communicate. Collaborate. Securely. -----Original Message----- From: Iceberg-Dev [mailto:dev.iceberg@gmail.com] Sent: Wednesday, December 09, 2009 9:51 PM To: Stanislav Kolar Cc: installer-dev(a)lists.apple.com Subject: Re: Access to /usr/local from installer plug-in On Dec 9, 2009, at 8:38 PM, Stanislav Kolar wrote: > Hello, > > > > I have to write an installer plug-in that asks for some initial > information during the installation process and saves them as a xml > file into /usr/local/my_dir directory. > > The problem is that in the method "shouldExitPane" I don't have an > appropriate rights to modify anything in the directory /usr/local... > > Is there a solution of my problem ? > A solution is to save the file in a location where you can write (such as /tmp or /Users/Shared) and then move the files to the final destination through a postflight (or postinstall) script depending on the package format you're using) because the script will probably be run as root in your situation (if you're requiring admin authorization it will (in Leopard and Snow Leopard)). The pitfall here is that an installer plugin may not be run if the package, metapackage or distribution is installed through installer or ARD. So you need to take this into account too. My $0.02 _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Re: Javascript behaves differently, 10.5.8 vs. 10.6.2
by Steve Swanson 10 Dec '09

10 Dec '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Sudden problem with "choice hierarchy" in Snow Leopard
by Stephen Greenfield 09 Dec '09

09 Dec '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Thread-index: Acp5JUathO0QZ+6qnU+5R55tFyBPLw== Thread-topic: Sudden problem with "choice hierarchy" in Snow Leopard User-agent: Microsoft-Entourage/12.23.0.091001 _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Sudden problem with "choice hierarchy" in Snow Leopard
by Stephen Greenfield 09 Dec '09

09 Dec '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Thread-index: Acp5I+gzzbiP/ZgEjEG0Powspg17sg== Thread-topic: Sudden problem with "choice hierarchy" in Snow Leopard User-agent: Microsoft-Entourage/12.23.0.091001 _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Access to /usr/local from installer plug-in
by Iceberg-Dev 09 Dec '09

09 Dec '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:in-reply-to:references :mime-version:x-priority:content-type:message-id :content-transfer-encoding:from:subject:date:to:x-mailer; bh=G3U1JCFYhLcxHAwTbUBOz8IaHXo/T+rl1PdHevxih4M=; b=jmggDLEQDhgolOBrev8qv1/tQogd3KsnIgHOkvRRS8J0aExEhxvkNzA2sfKfUxDlMW weVOAiZrkSmxnKWn81VDBysaKaZvpTpvf+ZAzGjpbyBgc8aLU4qxy8Oc7XxXNXntKkbA lXHvSR9HmvG6LmQQDlir8jyyqeIZAVjykSBpw= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=in-reply-to:references:mime-version:x-priority:content-type :message-id:content-transfer-encoding:from:subject:date:to:x-mailer; b=xfFWrmrdmrTjVNihTiaRQqv8HrqBwqb1K0yoq/Y68vXxhf+/RJRZqEQ5UITrx6nefD /LzbOW0KWYXHGLwR6w6OlnAmo5Auv1acHjeV+UzVpkBD4Iqd5Y6pIFOdHHcUeleroSwy Cs6XtpJPsFgDh7d2AYVcBx9m84wWrNd4rjyA8= On Dec 9, 2009, at 9:43 PM, Bill Coderre wrote: Hello, Not sure to understand where the security risk is here. I could be missing something. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… On Dec 9, 2009, at 11:38 AM, Stanislav Kolar wrote: I have to write an installer plug-in that asks for some initial information during the installation process and saves them as a xml file into /usr/local/my_dir directory. The problem is that in the method "shouldExitPane" I don't have an appropriate rights to modify anything in the directory /usr/local... Is there a solution of my problem ? In an install that requires Admin privileges, Installer panes run as the logged in user, so you have to write your info someplace that THAT user can access. The only good choice is /tmp in some known filename, and then have a preflight or postflight write the info into /usr/local. (You can't use mktemp to generate a temp file securely, because your preflight and postflight need to know the name of the temp file.) This presents a security risk. (For instance, some badguy knows you will be writing into /tmp/MySecretFile, so they create a symlink at that location, and point it to /kernel.) /mach_kernel is root:wheel 644. So if you try to write something into it from the plugin, you won't be able to. The issue could be that someone replaces the contents of the MySecretFile after it has been written and before it has been read by the script. In this case, it might just be easier to modify the installation script to do some very bad things. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Access to /usr/local from installer plug-in
by Iceberg-Dev 09 Dec '09

09 Dec '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:in-reply-to:references :mime-version:x-priority:content-type:message-id:cc :content-transfer-encoding:from:subject:date:to:x-mailer; bh=kX2f2Nt9gwn5Pxv/cmpK7pZ4WdMNE2APvAJqdSd53GM=; b=oVcEoFvc5hV/gyWH0OeE25tsbHq2F2UodmJsguJ84jUGRyvbO25zAXp7vvfbXit955 C6ADhprEplvkFtelv1D5J9RZZbKUWH7ZvxKYRKufRUBPXJO8TUAB2WmE26YYMeS3Lhid IjgTcc+WsSwf59GbsWskkSb8K2YtBmEbA4KjY= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=in-reply-to:references:mime-version:x-priority:content-type :message-id:cc:content-transfer-encoding:from:subject:date:to :x-mailer; b=PqJsKfPpPmBn4Zlrj7EFLAiccYkEqip0rsWTdc4mp9t9B015/hGbq/OWSEgdul7Rie zmmsSuTN/eAgNyZDtT5bM2/q+DC7mCfJ8+E31duZXJkCeomaz9Gv4HoqtEnJj2wJIkNp BJUJxr/o5Pgt+CNnspNw0e+qyrmq2qzdp30pA= On Dec 9, 2009, at 8:38 PM, Stanislav Kolar wrote: Hello, Is there a solution of my problem ? My $0.02 _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… I have to write an installer plug-in that asks for some initial information during the installation process and saves them as a xml file into /usr/local/my_dir directory. The problem is that in the method "shouldExitPane" I don't have an appropriate rights to modify anything in the directory /usr/local... A solution is to save the file in a location where you can write (such as /tmp or /Users/Shared) and then move the files to the final destination through a postflight (or postinstall) script depending on the package format you're using) because the script will probably be run as root in your situation (if you're requiring admin authorization it will (in Leopard and Snow Leopard)). The pitfall here is that an installer plugin may not be run if the package, metapackage or distribution is installed through installer or ARD. So you need to take this into account too. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Access to /usr/local from installer plug-in
by Bill Coderre 09 Dec '09

09 Dec '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Access to /usr/local from installer plug-in
by Stanislav Kolar 09 Dec '09

09 Dec '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Importance: Normal _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: [Apple] Postflight Script
by Ananda Tallur 09 Dec '09

09 Dec '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Postflight Script
by Hafen, Keith 09 Dec '09

09 Dec '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Thread-index: Acp4cBmOfaebLX/cSpiHrkcKlNnXDw== Thread-topic: Postflight Script _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0