Re: Flat package installer-plug in permissions issue
On Wed, Apr 25, 2012 at 3:43 PM, Tony Zepeda <tony_zepeda@filemaker.com> wrote:
Hi, Since a digital signature is now required for 10.8 PackageMaker installers, I've converted a PackageMaker bundle installer in to its flat-file equivalent. The flat-file equivalent mostly seems OK except for one major problem: when the installer plug-in is executed (this installer has two installer plug-ins), the installer plug-in is no longer executed with Admin privileges.
The original PackageMaker bundle installer got Admin privileges, executed the installer plug-in with Admin privileges and the installation was a success. The new flat-file installer gets Admin privileges, executes the installer plug-in with NON-Admin privileges and the installation is botched (because the plug-in without elevated privileges no longer has access to certain locations such as the /Applications folder).
Does anyone have insight in to this? I'm sure someone else has encountered this. I haven't completely resolved this issue but this almost seems like a bug with the PackageMaker flat-file format.
If an Installer plugin ever got Admin privileges (assuming you mean root), it is/was a security flaw. The code of an installer plugin should be run with the same exact privileges the Installer.app has. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.... This email sent to site_archiver@lists.apple.com
participants (1)
-
Stephane Sudre