Re: Xcode default "Install Permissions", clean "permission denied"
Re: Xcode default "Install Permissions", clean "permission denied"
- Subject: Re: Xcode default "Install Permissions", clean "permission denied"
- From: Jack Repenning <email@hidden>
- Date: Mon, 27 Aug 2007 17:43:12 -0700
On Aug 27, 2007, at 5:13 PM, Steve Checkoway wrote:
I'm not sure why Apple suggests that, but the "standard" *nix
permissions would be 0755 and 0644 (and if you think the leading
zero is superfluous, try calling chmod(2) without it--e.g., perl -e
'chmod 755, foo'). I'm not sure why you'd want to give anyone in
the same group write privs.
I believe that, if your account as "admin" rights configured in the
System Preferences, then you are put in the "admin" group at the Unix
level, and so by this 0775 policy you're able to modify things that
are writable by group "admin". Some system and installed stuff is
group "admin", so the recommended 0775 grants you the right to change
these things -- *without* providing credentials. Other things get
installed as group "wheel" (which you're not in), so even mode 0775
doesn't get you access (without credentials). I haven't done
anything like a thorough survey of all installed files (!), but the
ones I checked displayed a certain consistency about this, a certain
credibility that the "admin" things were more reasonable to have
"admin" people modifying than the "wheel" ones.
But whether you, personally, want any administrative mods to happen
without credentials is, I should think, up to you. On a multi-user
system, you'd never allow that, you'd at least want the logging that
goes along with credentialing. But since most Macs are single-user,
maybe it's justified ... or, anyway, maybe that was the philosophy.
One thing to keep in mind: even if you do apply more restrictive
permissions (and I don't mean to stand in your way), the Disk Utility
"fix permissions" step will probably undo your careful caution.
-==-
Jack Repenning
Chief Technology Officer
CollabNet, Inc.
8000 Marina Boulevard, Suite 600
Brisbane, California 94005
office: +1 650.228.2562
mobile: +1 408.835.8090
raindance: +1 877.326.2337, x844.7461
aim: jackrepenning
skype: jrepenning
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Xcode-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden