site_archiver@lists.apple.com Delivered-To: installer-dev@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:subject:mime-version :content-type:from:in-reply-to:date:content-transfer-encoding :message-id:references:to:x-mailer; bh=g6bTWaQvHRNrlX41CDDaEhGwL8O+xnfnARc839+w/lE=; b=waNvVL9F4fa5iyp5vw+L318Zg9Jqnva8mYTSKtfOrzlUediRKfqvhlw0Rys3eGWo5c TdE+FB5zUyb/o2bq+e1O9vWUoy7+gWau0e98HxU+p4RLGSISKxHk9lERiCA0Klja63bK mB9aaVZD5yIkuI0c3eryP4wkQnnm2CJNXGwR0= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=subject:mime-version:content-type:from:in-reply-to:date :content-transfer-encoding:message-id:references:to:x-mailer; b=Hc2WtLozmqTtu2DiLaoamXMlY0ysxY1mZT8OxXld4Yr0K3psouJ/kTW3Ag3Wb/ZCEY UXBbSAjwmgycLOXZmIM2EWtpCtbCEQQRrldzq52plqf0uBOY5nBTf3iT6PQL5qGQytKv pG8zdJ44NOtdPOYs6Uy8/cG+zlbzo5VJCfGyA= On Nov 20, 2009, at 1:10 PM, Don Montalvo wrote:

...

Because Installer.app will change ownership/permissions on all folders referenced in a package to what is specified in the package. So if you don't get them exactly right, you'll negatively affect the security of the user's computer. And it makes it more difficult for Apple to change ownership/permission on these folders if they need to.

But if a folder already exists, /usr/sbin/installer should leave permissions alone, correct?

No, that's the problem. Installer.app/installer does NOT leave permissions/ownership alone. It applies whatever permissions are specified in the package to the folders. That's why Apple says not to include the folders in your packages. Eli _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.a... This email sent to site_archiver@lists.apple.com