site_archiver@lists.apple.com Delivered-To: installer-dev@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=i1hOEeNaMYMHV3H3EMdiwXzudn+4ftckfJeWWm/MEWE=; b=OmCJfpHbVWbtJUuRZQWVra9kP223AAHgoj7GQ1YIHNlNw6LnGkOzqnyBLuA8NFF1e5 i3fhwaOWqsXvy5m4CAUOTw0byj/6S3/xnD8R6xkvadfMP8iTZhpV34MKhyVTeukjs97o 0/BUZBL225342lFfVmRdg/cKFny7iyu0zTr9k= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=bkoMvK9e0Wp8nMwdOIvd4QizdQR2I/BU6FFJgztEpcH3tonc9AyHCnJF7baLvS4pr9 343/z90ko0Q83H70gWePd+q6wrCJ/lanq+hkozN5YSaVVLndHGnR7Yq2Gr6885fxXGSd cHVKXcQ5joqqVrGfBIui7OolqknBQlkb8dpkQ= 2009/2/17 Crawford Kyle <kcrwfrd@gmail.com>:
Well said Greg.
I've been thinking about this. Is there a way Apple could disallow these arbitrary installer scripts and still support the scenarios that seem to require them? Perhaps this warrants a separate thread.
If you mean disallow any external scripts, well, there's a reason they're allowed: to allow for things they haven't foreseen. I know my problem would be very unlikely to be handled in the packagemaker app, for instance (i.e. applying a morph target to an Alias Wavefront Maya object file and saving out the results). If Apple foresaw that need, they probably *still* wouldn't include the possibility because it would be so rare. On the other hand, if you mean disallowing doing specific certain things, well, then that becomes an arms race. You disallow wget, they include a perlscript that uses LWP. You block outgoing fetches to port 80, they set up a proxy server on their own site to redirect from a different port. Etc etc. You block all offsite access, you may very well outlaw a perfectly valid approach to fetching the latest update patch and applying it. -- Dodger _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.a... This email sent to site_archiver@lists.apple.com