June 2009 - Installer-dev - lists.apple.com

Re: Install check logic failing
by Taylor Armstrong 26 Jun '09

26 Jun '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com User-agent: Thunderbird 2.0.0.21 (Windows/20090302) Thanks Mario, Taylor Hi, The package fails on a 2x2.8 ghtz Intel box. Well, I would say it equals: if ((max cpu speed <= 500) == true) then Pass; else exit with error; Of course, testing if "(max cpu speed <= 500) equals true" is the same as just testing if (max cpu speed <= 500). So your test does: if (max cpu speed <= 500) then Pass; else exit with error; which is the opposite of what you want. If you correct it, rather then testing for false I would suggest testing "if (max cpu speed > 500)", in case that test exists. It would be a lot more readable:) Cheers, and happy coding, Mario -- _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… As soon as I actually read the statement out loud, it made sense. Too little sleep, and a "double-negative" in the logic. I've changed it to "Greater than or equal" and set it to build again, we'll see how long it takes (for some reason, it has been SLOW on my G5.... 7+ hours to build an Office 2008 package :( Mario Emmenlauer wrote: Taylor Armstrong wrote: Trying to use PackageMaker for the 1st time (I normally just use install-ease or Iceberg since most of my packages are fairly simple). I added a install check that clearly states "Maximum CPU Frequency (Hz) is less than or equal to 500". It is required, and "Pass if" is set to "true" Question - am I simply looking at the logic backwards? The "true", in ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ W. Taylor Armstrong Taylor.Armstrong(a)noaa.gov NOAA's National Ocean Service Domain Infrastructure Team 1305 East-West Highway Phone (301) 713-1156 Silver Spring, MD 20910 http://nos.noaa.gov ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This email sent to site_archiver(a)lists.apple.com

1 0

Re: Install check logic failing
by Mario Emmenlauer 26 Jun '09

26 Jun '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com User-agent: Thunderbird 2.0.0.22 (Macintosh/20090605) Hi, The package fails on a 2x2.8 ghtz Intel box. Well, I would say it equals: if ((max cpu speed <= 500) == true) then Pass; else exit with error; Of course, testing if "(max cpu speed <= 500) equals true" is the same as just testing if (max cpu speed <= 500). So your test does: if (max cpu speed <= 500) then Pass; else exit with error; which is the opposite of what you want. If you correct it, rather then testing for false I would suggest testing "if (max cpu speed > 500)", in case that test exists. It would be a lot more readable:) Cheers, and happy coding, Mario -- Dipl. Inf. Mario Emmenlauer Cell: +49-(0)176-23463809 Bitplane AG Office: +41-(0)44-430-1106 Badenerstrasse 682 Fax: +41-(0)44-430-1101 CH-8048 Zürich mailto:mario * emmenlauer.de Zürich http://www.marssoft.de / http://www.xuvtools.org _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… Taylor Armstrong wrote: Trying to use PackageMaker for the 1st time (I normally just use install-ease or Iceberg since most of my packages are fairly simple). I added a install check that clearly states "Maximum CPU Frequency (Hz) is less than or equal to 500". It is required, and "Pass if" is set to "true" Question - am I simply looking at the logic backwards? The "true", in This email sent to site_archiver(a)lists.apple.com

1 0

Install check logic failing
by Taylor Armstrong 26 Jun '09

26 Jun '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com User-agent: Thunderbird 2.0.0.21 (Windows/20090302) The package fails on a 2x2.8 ghtz Intel box. thanks, Taylor -- _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… Trying to use PackageMaker for the 1st time (I normally just use install-ease or Iceberg since most of my packages are fairly simple). I added a install check that clearly states "Maximum CPU Frequency (Hz) is less than or equal to 500". It is required, and "Pass if" is set to "true" Question - am I simply looking at the logic backwards? The "true", in my mind, means... if the statement (max cpu speed <= 500), then the package fails. I'm normally not the most logical person, so am I reading into it backwards? Does this need to be "false" in order to register? The package itself is taking 6-7 hours to build on my G5, so I'm trying to avoid "experimenting" any more than necessary. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ W. Taylor Armstrong Taylor.Armstrong(a)noaa.gov NOAA's National Ocean Service Domain Infrastructure Team 1305 East-West Highway Phone (301) 713-1156 Silver Spring, MD 20910 http://nos.noaa.gov ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This email sent to site_archiver(a)lists.apple.com

1 0

Re: permissions - package layout
by Bill Coderre 24 Jun '09

24 Jun '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: permissions - package layout
by Greg Neagle 24 Jun '09

24 Jun '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com On Jun 23, 2009, at 6:24 PM, Peter Lee wrote: Regarding PackageMaker and setting up owners and groups -Greg _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… - Should I definitely do this in the temporary structure first - and not use the PackageMaker interface? - I was thinking that I'd prefer to not set the owners and groups within my temporary package setup folder - That's what I do - I set the owner, group and mode for all filesystem items and tell PackageMaker to leave them alone (--no-recommend via the command-line) not being a *nix guru, but I think that'd mean that I'd then need to cleanup using sudo or logged in as root? Maybe that's not so bad.... Use sudo. `sudo -s` will allow you to operate as root without enabling a root login. This email sent to site_archiver(a)lists.apple.com

1 0

Re: packagemaker newbie - permissions issue
by Greg Neagle 24 Jun '09

24 Jun '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com On Jun 23, 2009, at 4:34 PM, Peter Lee wrote: -Greg _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… I guess it might be possible to put the database files in /Library/ Application Support/Rising Software as well? Yes, and that would be preferable to modifying files inside the application bundle. I'd also urge you to consider making the file in /Library/ Application Support/Rising Software read-only, and copying it to ~/ Library/Application Support/Rising Software, where you can modify it in the user's home dir, but this is a matter of preference as long as the software can run with the /Library/Application Support/ Rising Software file missing or damaged by the user. The file in /Library/Application Support/Rising Software needs to be shared amongst all users - it's a shared database of settings, scores etc. Then making it available to all users at /Library/Application Support/ Rising Software seems like a good strategy. This email sent to site_archiver(a)lists.apple.com

1 0

permissions - package layout
by Peter Lee 24 Jun '09

24 Jun '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com User-agent: Thunderbird 2.0.0.22 (Windows/20090605) Hello, Our app needs certain files to be rw for EVERYBODY who uses the application. Regarding PackageMaker and setting up owners and groups Thanks, Peter Lee -- Peter Lee ptle(a)risingsoftware.com ----------------------------------------------------------------------- Rising Software Australia Pty. Ltd. http://www.risingsoftware.com/ Publishers of 'Auralia' - Ear Training and 'Musition' - Theory Training Ph: +61 3 9481 3320 FAX: +61 3 9481 3380 USA Freecall: 1 888 667 7839 _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… I've had a bit more of a read and think and wouldn't mind some clarification of my current thoughts if possible! - Keep all files in the app bundle owned by 'root' with group 'admin' - Keep writeable files out of the bundle if possible. If they do have to be in the bundle, keep them owned by 'root' with group 'admin', and add 'rw' for 'others'. - Store those files in /Library/AppSupport/RS/. Make them owned by 'root' with group 'admin'. Add 'rw' for 'others'. - Should I definitely do this in the temporary structure first - and not use the PackageMaker interface? - I was thinking that I'd prefer to not set the owners and groups within my temporary package setup folder - not being a *nix guru, but I think that'd mean that I'd then need to cleanup using sudo or logged in as root? Maybe that's not so bad.... This email sent to site_archiver(a)lists.apple.com

1 0

Re: packagemaker newbie - permissions issue
by Eli Bach 23 Jun '09

23 Jun '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:subject :mime-version:date:references:x-mailer; bh=w3Hm2fuyBGbJqfq8BNxvSjeWurHrThXz5FKOSxShtaI=; b=AElfMBI2q3ZGVE9lUMTdMoapefk7G5zedTnyhaZEQtE5mfG1JWkrGkaUHURViO1V9y VtGSqlh1quCW/5dGV57wnHyJARR9LFcKUioIpyUbNAg2/uZSEmoofH/MflKzjg3O627G b3af5sIqQxRSvhzLDCnoShWVFWe2aT9wQIneE= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:from:to:in-reply-to:content-type :content-transfer-encoding:subject:mime-version:date:references :x-mailer; b=o4b4XfmpMSAuOinlggYXQ1ldIEcEGtfywo8yD59/tuNZRUfsGfCEv9ujc17YhvBwtm 2Qu/PlnKq/hjp3GGxYiOUqCC7JS0srDi58b3TodhAjg9rr9e4UqoqPFes4R6bx7fntAh 11HtyEbJo7QV9iujebgX7JLQQk66GAn1EX73g= On Jun 23, 2009, at 4:34 PM, Peter Lee wrote: Eli _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… Thanks for the info! As a Mac OS X systems administrator, I find software that modifies files inside its own application bundles evil, and would encourage you to rethink that design decision. It makes it extremely difficult to store out malicious modifications from benign modifications. We're really not wanting to modify files inside the bundle... but we are deploying an embedded database server (Firebird) inside the bundle, that needs read / write access to it's security database when it runs. Security actually isn't used for the embedded version... but regardless - it needs the access! I guess it might be possible to put the database files in /Library/Application Support/Rising Software as well? Yes, this would be the thing to do. Create (or copy a default version from your bundle) this security database to /Lib/AppSupport/RS/. The permissions you put on the file depends on who can update the file and when it gets updated. I'd also urge you to consider making the file in /Library/ Application Support/Rising Software read-only, and copying it to ~/ Library/Application Support/Rising Software, where you can modify it in the user's home dir, but this is a matter of preference as long as the software can run with the /Library/Application Support/ Rising Software file missing or damaged by the user. The file in /Library/Application Support/Rising Software needs to be shared amongst all users - it's a shared database of settings, scores etc. If _anybody_ who runs the software must have read/write access to these files, you must set the mode to 666 if they are actually files, and 777 if they are directories. You _cannot_ rely on all users being in any specific group. Ahh... ok... thanks for this. Just looking in Packagemaker - how does one achieve this? Is it something best done with a post install script? If you install the file as part of your package, you generally should have the correct permissions on the file when you add it to the package. If you create or copy the file when your app is first launched, then you would use code to set the file permissions how you want them. This email sent to site_archiver(a)lists.apple.com

1 0

Re: packagemaker newbie - permissions issue
by Peter Lee 23 Jun '09

23 Jun '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com User-agent: Thunderbird 2.0.0.22 (Windows/20090605) Thanks, Peter Lee -- Peter Lee ptle(a)risingsoftware.com ----------------------------------------------------------------------- Rising Software Australia Pty. Ltd. http://www.risingsoftware.com/ Publishers of 'Auralia' - Ear Training and 'Musition' - Theory Training Ph: +61 3 9481 3320 FAX: +61 3 9481 3380 USA Freecall: 1 888 667 7839 _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… Thanks for the info! As a Mac OS X systems administrator, I find software that modifies files inside its own application bundles evil, and would encourage you to rethink that design decision. It makes it extremely difficult to store out malicious modifications from benign modifications. We're really not wanting to modify files inside the bundle... but we are deploying an embedded database server (Firebird) inside the bundle, that needs read / write access to it's security database when it runs. Security actually isn't used for the embedded version... but regardless - it needs the access! I guess it might be possible to put the database files in /Library/Application Support/Rising Software as well? I'd also urge you to consider making the file in /Library/Application Support/Rising Software read-only, and copying it to ~/Library/Application Support/Rising Software, where you can modify it in the user's home dir, but this is a matter of preference as long as the software can run with the /Library/Application Support/Rising Software file missing or damaged by the user. The file in /Library/Application Support/Rising Software needs to be shared amongst all users - it's a shared database of settings, scores etc. If _anybody_ who runs the software must have read/write access to these files, you must set the mode to 666 if they are actually files, and 777 if they are directories. You _cannot_ rely on all users being in any specific group. Ahh... ok... thanks for this. Just looking in Packagemaker - how does one achieve this? Is it something best done with a post install script? This email sent to site_archiver(a)lists.apple.com

1 0

Re: packagemaker newbie - permissions issue
by Greg Neagle 23 Jun '09

23 Jun '09

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com -Greg On Jun 23, 2009, at 8:50 AM, Greg Neagle wrote: -Greg On Jun 23, 2009, at 7:08 AM, Peter Lee wrote: Hello, Peter Lee _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/greg.neagle%40disneyan… _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/greg.neagle%40disneyan… _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… "it makes it extremely difficult to store out malicious modifications from benign modifications." should read: "It makes it extremely difficult to sort out malicious modifications from benign modifications." As a Mac OS X systems administrator, I find software that modifies files inside its own application bundles evil, and would encourage you to rethink that design decision. It makes it extremely difficult to store out malicious modifications from benign modifications. I'd also urge you to consider making the file in /Library/ Application Support/Rising Software read-only, and copying it to ~/ Library/Application Support/Rising Software, where you can modify it in the user's home dir, but this is a matter of preference as long as the software can run with the /Library/Application Support/Rising Software file missing or damaged by the user. If _anybody_ who runs the software must have read/write access to these files, you must set the mode to 666 if they are actually files, and 777 if they are directories. You _cannot_ rely on all users being in any specific group. Our applicaton has a couple of files that anybody who runs the application needs read/write access to. One is stored in Library/ Application Support/Rising Software and the other is in the application bundle. In Packagemaker, they are getting assigned to group 'staff', with my own name as the owner. As I understand, who owns the file isn't really an issue, as long as the group has rw access, and all users who need to use the spp are in the group that owns the file(s). On 10.5, every user seems to be in the 'staff' group. I not sure if that that's the case in earlier versions of OSX - it may be but my 10.4 disk won't boot at the moment.... Having said that - on a friends machine - 10.5, he's transferred his profile from an earlier version of OSX, and he's not in staff. I don't know if he was in staff on his earlier box - I _think_ that in earlier versions of OSX, you are in a group with the same name/ number as your user name/number, and perhaps you don't get membership of staff automatically when you transfer your profile. I'm just wondering how we should handle this? We could make those files owned by group 'everyone' instead? It sounds a bit ugly to me? Thanks, -- Peter Lee ptle(a)risingsoftware.com ----------------------------------------------------------------------- Rising Software Australia Pty. Ltd. http://www.risingsoftware.com/ Publishers of 'Auralia' - Ear Training and 'Musition' - Theory Training Ph: +61 3 9481 3320 FAX: +61 3 9481 3380 USA Freecall: 1 888 667 7839 This email sent to greg.neagle(a)disneyanimation.com This email sent to greg.neagle(a)disneyanimation.com This email sent to site_archiver(a)lists.apple.com

1 0