August 2010 - Installer-dev

Re: More on daemon install and permissions/owner checks
by Iceberg-Dev 19 Aug '10

19 Aug '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:mime-version:in-reply-to :references:content-type:message-id:content-transfer-encoding:from :subject:date:to:x-mailer; bh=oUMjCHUmYfH7U2Dy9IUoyR+IC/Daw+vUnI1jFUV8qJw=; b=e8lEcg/hd2OcDHzoovI5O+jtna1xe/YLudOwaTELfUigr/YU4SkAY98eORDL8DVl7m K2DLdw67F2EM6yDHCvu7FEnE1bsfzwwnizNqCrXJlJ7AMmTnQhZAXyFo9Y6csvsypKv4 J790auFUCRZTbz3SgJvjsJwg1M0Q7TaHcD/kk= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:content-type:message-id :content-transfer-encoding:from:subject:date:to:x-mailer; b=Xwec+cn2cGuext4KNKUTUEe0m8GtOp9JNK4HjlXD1J1CQXjBXX/IH0fiOcZHmgk4bl 5gZVsNDANsHUGYYDW1HZcWxX9ByK0Y1+/dQsR++aHBalT5lSWJZfoozWU6FaMIub1Fj0 8wAFjyZqdkMcRSV/O4M72CiTSzC2bzcq8/+7w= On Aug 19, 2010, at 9:34 PM, Monte Benaresh wrote: Hi All, _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… I don't mean to beat a dead horse, but we are close to deciding what to do when our preflight script finds wrong permissions or owner when checking /Library/PrivilegedHelperTools/ and it's parents. Here are the remaining questions we have boiled down to: 1. Should we just aspire to the same degree of permissions/owner repair that Disk Utility does, i.e., not care about the owner on "/"? BTW, DU does not fix a bad owner or permissions of /Library/ PrivilegedHelperTools/. I know some of you have said that DU should fix the owner of "/". Disk Utility is not always the most clever guy in the room: e.g. CVE-2008-2324 . IMHO, the reference is what the boms of the OS install disks say (plus the security fixes introduced by minor OS updates and security updates). So if the boms say '/' should be root/admin, just consider it should be root/admin. This email sent to site_archiver(a)lists.apple.com

1 0

Re: More on daemon install and permissions/owner checks
by Xochitl Lunde 19 Aug '10

19 Aug '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com > > Hi All, > > I don't mean to beat a dead horse, but we are close to deciding what > to do when our preflight script finds wrong permissions or owner > when checking /Library/PrivilegedHelperTools/ and it's parents. > Here are the remaining questions we have boiled down to: > > 1. Should we just aspire to the same degree of permissions/owner > repair that Disk Utility does, i.e., not care about the owner on > "/"? BTW, DU does not fix a bad owner or permissions of > /Library/PrivilegedHelperTools/. I know some of you have said that > DU should fix the owner of "/". > > 2. If the user's system already has permissions/owner settings that > are insecure, are we creating any additional insecurity by > installing a daemon into a structure that is already compromised? > Do we have a responsibility, as a third-party software installer, to > fix this situation? > > Thanks for your input. We will make our decision this evening, Pacific time. > > Regards, > > Monte Benaresh > PACE Anti-Piracy > Another thing I just noticed. Failure during pre-flight script is not supported by Installer. You need a Volume Check or Installation Check if you want to support installation failures based on scripting. Can't find the thread with that in it yet, but it was an old post of mine where I was told it's not supported. <- only link i could find to the old post, given your decision deadline.

1 0

Re: More on daemon install and permissions/owner checks
by Xochitl Lunde 19 Aug '10

19 Aug '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com <installer-dev-bounces+xochitl_lunde=tripplite.com(a)lists.apple.com> wrote on 08/19/2010 02:34:29 PM: > > Hi All, > > I don't mean to beat a dead horse, but we are close to deciding what > to do when our preflight script finds wrong permissions or owner > when checking /Library/PrivilegedHelperTools/ and it's parents. > Here are the remaining questions we have boiled down to: > > 1. Should we just aspire to the same degree of permissions/owner > repair that Disk Utility does, i.e., not care about the owner on > "/"? BTW, DU does not fix a bad owner or permissions of > /Library/PrivilegedHelperTools/. I know some of you have said that > DU should fix the owner of "/". > > 2. If the user's system already has permissions/owner settings that > are insecure, are we creating any additional insecurity by > installing a daemon into a structure that is already compromised? > Do we have a responsibility, as a third-party software installer, to > fix this situation? > > Thanks for your input. We will make our decision this evening, Pacific time. > > Regards, > > Monte Benaresh > PACE Anti-Piracy > The only similar sounding apple code that I have seen is in a unix domain socket example. It doesn't come with an installer, but it does do a permission check on the directories where the unix domain socket resides. If the permissions are wrong, this Apple program refuses to run. (Server.c: ). The documentation in source code for unix domain sockets matches the recommendation for daemons in TN2083 about owners & permissions. Even if you fix the weird user with the installer, what's to say that it won't just happen again after you've installed? I don't know what your daemon does, but if you're concerned about the security of the file system, wouldn't this be a check your app should run whenever it starts? If your daemon is checking the security on startup, then your installer probably does not have to do anything. Rather than designing a strange installer, have you thought about packaging a "fix it" script with your distribution instead, if you really think a lot of people will have this problem? i.e. : Install fails with message about running fix it tool.. user runs fix it tool from DMG. If the user has to start running the fix it tool a lot, it becomes apparent something is messing with his file system in an undesirable way. I just looked at TN2083 again. To me it seems like they've made updates that weren't noted, but probably my memory is failing.

1 0

More on daemon install and permissions/owner checks
by Monte Benaresh 19 Aug '10

19 Aug '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Hi All, I don't mean to beat a dead horse, but we are close to deciding what to do when our preflight script finds wrong permissions or owner when checking /Library/PrivilegedHelperTools/ and it's parents. Here are the remaining questions we have boiled down to: 1. Should we just aspire to the same degree of permissions/owner repair that Disk Utility does, i.e., not care about the owner on "/"? BTW, DU does not fix a bad owner or permissions of /Library/PrivilegedHelperTools/. I know some of you have said that DU should fix the owner of "/". 2. If the user's system already has permissions/owner settings that are insecure, are we creating any additional insecurity by installing a daemon into a structure that is already compromised? Do we have a responsibility, as a third-party software installer, to fix this situation? Thanks for your input. We will make our decision this evening, Pacific time. Regards, Monte Benaresh PACE Anti-Piracy _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Upgrade fails on OS 10.5.8
by Sravana Kumar 19 Aug '10

19 Aug '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type; bh=y3s4JuFE6/tlY27AuZxqD1uVU6eD0OrDnX5pXPjdHpQ=; b=FZWMkzUwFVq2olBSUn6PPboXnSSQXfV7Uc8HK5xocqew94EM6UdscV1TSg1q/3mR0h UzRhuDkRrV287wuJaS2aOc9PlVw4BsT1kKS0U4bSFMPFlcSv4rEnRTcUaud+kLsYYwCp J16UV44Wga3UjgKa0MrvBTrtsPsWqV1i5YPpc= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=VjoPHcXaCQXGAbpKIgzh7Q4UctwmcVzfuwYPIKDZXFsCRYp2GnnNYuP1JIqfvsAFZJ fzNP4OmrMB4ZpmQBKGLRh5GzdVyjUr/nlDzX0wT3wGCv3JdxjaLLjHEs7kMVVxMcUVp/ 5y5ol0o0hWo9793OxDby+8syj8asmaqDJSX/k= _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com 10.5 iSSUE.zip

1 0

Re: Cant replace the executable for auto upgradation when itsexecuting
by Iceberg-Dev 18 Aug '10

18 Aug '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:in-reply-to:references :mime-version:x-priority:content-type:message-id:cc :content-transfer-encoding:from:subject:date:to:x-mailer; bh=OZUky903HcsU9qNoK1MAsaOFbRBxUSdrzgL0bdVY0dA=; b=L/AbxXiWNDVKpGyO326QKCh1kN7mIudhMvkQfC3RSyCC0ro/QXSgJ6ZpjYkuLi5P9C 0hHKhhy9Cl027xLq/NMUi4Y3WyueyvN7AWUuO5qrXYqevB81Q+uh+TE9tt1GyuhD6Ciy EglIX7U5ik1IHSq33525AV5I2kzNiA/HT40qc= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=in-reply-to:references:mime-version:x-priority:content-type :message-id:cc:content-transfer-encoding:from:subject:date:to :x-mailer; b=SHSS5ted+HGaTfqWh3yMa/UNSY7O6lCCyDUU/U1b48nV8tMW/5+qgyrMMdDp/qprv+ B9Mkm/Dm+2aU25E/pZ0eQ0cG5RrDWiEPrsOcL9wUBodgXUbbtIkARrqyU8A9ZbGojcIF AdsCCi2+61r3Ifom7I56RU1ebxxA1RkwjIv4A= On Aug 18, 2010, at 7:32 PM, danchik wrote: That's correct. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… But you dont get to change your mind at that point... its either quit the running app, or force quit the installer. isn't that right? But the user finally deciding that (s)he would rather keep the old version of the application running than updating it is not very likely as the user is already in the mind of updating the application. Moreover with an alert dialog, one can wait for the end of a download or a track before quitting the application. So you don't really have any reason to cancel the update unless you finally don't want to update. And this would be a case that would not be handled if the application was not running. This email sent to site_archiver(a)lists.apple.com

1 0

Re: How to create flat packages?
by Chris Wolf 18 Aug '10

18 Aug '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:subject:references:in-reply-to :content-type:content-transfer-encoding; bh=mP/AYfuomSpKsXqWhr+splGLKjHE7JBtJ+GzAhtNPLE=; b=PcC72w1+lrVaGwThRSDNuqzmFIOZW7dXufmP/QCpnz96frjEtNcT+ozrykKgBnCOzk awYy9wQXEiT1Szpo86mZ1flj1GqKW/hVi1cQ+O3o47lhAeumZVNAJOmgHQcG1Jxozpf8 qKwbScJmy9qtxWwNAde7r7NyEFLSqA664yJIs= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; b=sW1tsSwtYIOObJRlyQNYJENoTSaSFSv6hd5F00OjfOUQRxcgrEb/lSiNh9u6ZPfh9F Q6AGEBKayR5wmJyuEc4T0hAZxm41y4+RGYJjjARlE+AwN+nhPKxOSJBYZlHfHbqDjF6g smPM9HiSztDCWjsTh96C1PF/mQ+CPCZqTxSaA= User-agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.11) Gecko/20100711 Thunderbird/3.0.6 On 8/18/10 3:35 AM, Per Olofsson wrote: > 18 aug 2010 kl. 03.54 skrev Chris Wolf: > >> I am wondering - what command line options I need to pass to packagemaker to >> create such a single-file package? > > > packagemaker --target 1.5 > >>From the man page: > > "Specifies the minimum target operating system version. Defaults to 10.3. For 10.5, flat packages packages and metapackages will be built;" > First, thanks a lot! Second - though I skimmed over the man page a number of times, I guess I was looking for an option specifically related to "flat" or "format" rather then "target". Next time I'll look more carefully. ;) Thanks, -Chris _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Upgrade fails on OS 10.5.8
by sakshi 18 Aug '10

18 Aug '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:content-type:content-transfer-encoding; bh=tqOYyVW1C+0uAf2FKQ7CSBJouE0ZfjKXvmZcKvhvQQk=; b=lMsw2ZsupSddLnlkvH0nANXfwXBeeUMMByeYoppFKwAaVA17Wh+eaWohD1D6p0NI3/ p9wFxcEXRIsUIW7KHeJQi4jyBM6wxwC5k/wKM9WMyoI3+hG9gitxKXPyjZkLYGihPah8 f3SZJP0lTsLqTDXU5WI/i7qiTv/dCoKp4kibw= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type :content-transfer-encoding; b=etgVD1SyM0id+EgGmgHpsVAYecwBOKBSDBm/9VZI/Hw85F3tOV9GuuB7teP2yBXlV1 FHBE0rDu6fAVh5YryrMonsV+MOcU5W+DA8EWZ2iuUQ+j9fgay1H8UkpozhoC+hlwIopF yOnGg47U8EWwfI1Ep3JPF7o2Y6Q1I56GjLUeY= Hi, I am running into a very weird issue on OS 10.5.8. I have an installer that I created on OS 10.6 which is a flat distribution package. It contains multiple component packages and one of them has the "Allow custom location" option set. The user can thus choose to install that particular package to any folder on any volume. Everything else goes to the System volume by default. When I run this installer on 10.5, I choose to install the customized package to ~/Desktop/MyApp. The installation goes through fine. Next I re-invoke the pkg to run the installer in upgrade mode. Again, I choose to install the customized package to ~/Desktop/MyApp. The upgrade fails to install. I can see errors like: installdb[212]: Failed to open database on '/Users/user1/'. Error 14, 13, Permission denied. payloadExtractor[215]: Error creating receipt. payloadExtractor[215]: pkgExtractor exited with error 1 while processing package '/Volumes/OS X/code_test/deployment/pmdocs/Customizable/01.pkg' Installer[200]: Install failed: The Installer could not install some files in “/Users/user1/Desktop/MyApp”. Contact the software manufacturer for assistance. 1. Installing outside the user area has no problem. 2. It looks like permissions/ownership of something in ~/Library/Receipts folder are interfering since deleting this folder causes the upgrade to run fine. Any clue what would fix this? Thanks! Sakshi _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Cant replace the executable for auto upgradation when itsexecuting
by danchik 18 Aug '10

18 Aug '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com You can check from a preinstall (Flat packages) or preflight (bundle package) script if an application is running and only displays the dialog in this case. This is what the iTunes and Safari installer do IIRC. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/danchik%40rebelbase.com This email sent to danchik(a)rebelbase.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… But you dont get to change your mind at that point... its either quit the running app, or force quit the installer. isn't that right? ----- Original Message ----- From: "Stephane Sudre" <dev.iceberg(a)gmail.com> To: <installer-dev(a)lists.apple.com> Sent: Wednesday, August 18, 2010 3:11 AM Subject: Re: Cant replace the executable for auto upgradation when itsexecuting On Tue, Aug 17, 2010 at 11:11 PM, Dan Sashko <danchik(a)rebelbase.com> wrote: Though now I think he actually meant to check if the app is running yourself since the desired behaviour is not part of the installer, in which case the only place for that script (with a chance to inform the user) would require that the ugliest and the most confusing script warning would popup to the screen when ever you launch your installer (before you can even check if the app is running)... Now if things changed and this can be done without that 'script warning' I'd also like to know about it :) This email sent to site_archiver(a)lists.apple.com

1 0

Re: Cant replace the executable for auto upgradation when its executing
by Stephane Sudre 18 Aug '10

18 Aug '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:content-type; bh=RKGDGdMeRk6vJZN+0F4aotTBKqkAPI/Hyf1NJ9tqh7I=; b=JkxBv669e4HXeM5Dy6chSe+dnxT3uh2vrlh6yBzDgovyenktWuDxe9amzUD1bcsfOr c2mcNLocDH/+4GO6nTafcgs0eZDs05cbnW9btD67ukVHq/obIDSzy4T7CrqGhWgTEb+L 8Gd++LbdM1lskVKSwo0dyyEj1cME6Q8BchRJk= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=ehO9yeSutQBlu8k74zER33Bk5e1jtxAC5vSjU8+ewbX5gLT+cs2pf2Q4sWRlqSpU3P e7R19rBwXlfeQfM7a1UVqTlFv87Y3cL79thVTRtCowwTPVFhaHovuwIFHA4wwxbHsu3t ZBypYPmDN4fDI0IBVxoRJ5HSwzbCmCSiunq4g= You can check from a preinstall (Flat packages) or preflight (bundle package) script if an application is running and only displays the dialog in this case. This is what the iTunes and Safari installer do IIRC. On Tue, Aug 17, 2010 at 11:11 PM, Dan Sashko <danchik(a)rebelbase.com> wrote: > Though now I think he actually meant to check if the app is running yourself > since the desired behaviour is not part of the installer, in which case the > only place for that script (with a chance to inform the user) would require > that the ugliest and the most confusing script warning would popup to the > screen when ever you launch your installer (before you can even check if the > app is running)... Now if things changed and this can be done without that > 'script warning' I'd also like to know about it :) _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0