Re: Best application ownership and permissions?
Re: Best application ownership and permissions?
- Subject: Re: Best application ownership and permissions?
- From: Stéphane Sudre <email@hidden>
- Date: Wed, 30 May 2012 16:37:40 +0000
- Acceptlanguage: en-US
- Thread-topic: Best application ownership and permissions?
On May 30, 2012, at 6:07 PM, Bill Cheeseman wrote: What are the best (or correct, or recommended) ownership and permissions settings for ordinary third-party applications in Mac OS X 10.7 Lion? Were there different recommendations in older versions of Mac OS X?
I've never been able to find a documentation officially stating the recommendations for the permissions and ownership in Mac OS X. The best source of information has always been the installation packages for the OS (if you're lucky enough not to be looking for some folders that are created upon installation). The evolution of these permissions have been said to be organic.
The latest PackageMaker User Guide (Jan 2012) says this: "In most cases, the owner should be root and the group admin ."
There are 2 reasons why I'm asking:
(1) in a small random sample of third-party applications in my local /Applications folder, about half set the owner to system (root) and half to the current user. It makes at least this difference: the applications owned by the current user do not require authentication when I drag them out of the /Applications folder, but the applications owned by root do. It strikes me that requiring authentication is the better practice, since the /Applications folder is shared by all users.
Applications owned by the current user have most of the time been installed by drag and drop.
If you check the permissions of applications installed from the Mac App Store, they are owned by root:wheel (the same is true for the System Applications).
|
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Xcode-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden