site_archiver@lists.apple.com Delivered-To: installer-dev@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:references:in-reply-to :mime-version:content-type:message-id:content-transfer-encoding:from :subject:date:to:x-mailer; bh=FYA5hNhKACpBBshyoYMNVTUwijq3EsVVjMeijx4hxJI=; b=t9gisECxV0h702bhwBpL4aVamHiUvmXWpaUtEDD+0afr9dcGKR8cpstBJSQpxhMbPt SyA7yLj31obm4LWTyTwf0qbdj4d0z1L6vOh31OFDUM6vdMu82Z8Y/YvdUzfL2N0Uu2at z4ZBNLObJotUKkmfOdH/X0Eg1Hk4j+O9j3m5I= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=references:in-reply-to:mime-version:content-type:message-id :content-transfer-encoding:from:subject:date:to:x-mailer; b=B/BS+TFwht2206RC5mCknzng/IOMxcX+1Qisv+kQKPQ4ibKph59a7dK/3Hcnwatya9 Bb4X+GuijgO36zMS20gREpBz2s1SZS6xp5JqnQb3EwIHxarEgPBv/VOnU0jWxV1LN2tH OzmAILjnB5yZFHEjEkK1Yaho6cyKKrha6b2Nw= Iceberg-Dev <dev.iceberg@gmail.com> wrote:
On Nov 20, 2009, at 10:16 PM, Eli Bach wrote:
On Nov 20, 2009, at 1:10 PM, Don Montalvo wrote:
Because Installer.app will change ownership/permissions on all folders referenced in a package to what is specified in the package. So if you don't get them exactly right, you'll negatively affect the security of the user's computer. And it makes it more difficult for Apple to change ownership/permission on these folders if they need to.
But if a folder already exists, /usr/sbin/installer should leave permissions alone, correct?
No, that's the problem. Installer.app/installer does NOT leave permissions/ownership alone. It applies whatever permissions are specified in the package to the folders. That's why Apple says not to include the folders in your packages.
AFAIK, if a folder already exists, the permissions are unchanged _UNLESS_ the overwrite permissions flag is set.
I've created over 300 packages for my last employer (I'm a contractor now). I've always had the flag set to NOT change permissions on any existing folders. Never had a problem.
With PackageMaker, you don't have the ability to change this flag for Flat packages (IIRC). You can change it for bundle packages. With other tools, you can change this flag.
Apple _DOES_ include system folders in its packages and these packages are not system related packages but applications (e.g. iTunes).
Thanks for the info. OK, I'll bite. ;) What tools are you talking about...the new version of Iceberg? :):):) Don <drooling> _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.a... This email sent to site_archiver@lists.apple.com