site_archiver@lists.apple.com Delivered-To: installer-dev@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:in-reply-to:references :mime-version:content-type:message-id:cc:content-transfer-encoding :from:subject:date:to:x-mailer; bh=oqxQrqSx4+oqJC2khnyZd6a7bV6t3p69eiBtZ4CHF+g=; b=x+Rb1q2jrvCFm55b8uAS+rs9pD3+b2bcNQ5DJgmlnx/0bNVTcyqM33HaPYFhRKcZAc IVNqRJ44rTeKhq4U2CetFFGlVctTTxyZ/TYdycwLqieY3B9AmxRgurPr8RznOnHM/qJe T9+kFKP+9x0YTmhhAU4qhIM47MgvnNkgi9Qtg= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=in-reply-to:references:mime-version:content-type:message-id:cc :content-transfer-encoding:from:subject:date:to:x-mailer; b=dCFi4TzBstuvIQioiNMiz4kZIDhtquwdk0GIUjHitVbitBlVjNvcr3YgaLgAAVIJv8 nb77no2KZifi4+xZRsMZX8cbi4ycaFDJnWkQo600Xk4jxhgks15+/6nM3I0ur/Zhe/3z lqoRp0GgrtZnadqfnV+Vtei1fDkq5yQiRQyGw= On Nov 20, 2009, at 10:16 PM, Eli Bach wrote: On Nov 20, 2009, at 1:10 PM, Don Montalvo wrote: _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.a... Because Installer.app will change ownership/permissions on all folders referenced in a package to what is specified in the package. So if you don't get them exactly right, you'll negatively affect the security of the user's computer. And it makes it more difficult for Apple to change ownership/permission on these folders if they need to. But if a folder already exists, /usr/sbin/installer should leave permissions alone, correct? No, that's the problem. Installer.app/installer does NOT leave permissions/ownership alone. It applies whatever permissions are specified in the package to the folders. That's why Apple says not to include the folders in your packages. AFAIK, if a folder already exists, the permissions are unchanged _UNLESS_ the overwrite permissions flag is set. With PackageMaker, you don't have the ability to change this flag for Flat packages (IIRC). You can change it for bundle packages. With other tools, you can change this flag. Apple _DOES_ include system folders in its packages and these packages are not system related packages but applications (e.g. iTunes). This email sent to site_archiver@lists.apple.com