Joined: 21 Dec 2010
Location: Rochester, NY
Posted: 14 Jun 2011 at 2:01pm
The most recent (April 2 timestamps) version of postinstall and postupgrade in the IDF packaging scripts are explicitly setting ownership and permission for the entire app bundle. You are currently setting folders within the app bundle to 775 (which is different from the typical 755), files to 644 (which is normal), and executables to 775 (again, different from the typical 755).
I ask about this because you are setting up these permissions to be less restrictive than normal. Any account with administrator privileges could modify the files set to 775, where they would have less privilege were the same directories/files set to 755.
I am curious what problem is being solved or worked around by the new section of these scripts, so that I may better understand whether we want to carry through the same permissions in our environment. If there is no specific problem you are attempting to address, I'd like to request that the application directories and files be left with the typical default permissions of 755/644, which are more restrictive than what the script sets.
The changed permissions also differ from the 755/644 permissions set for the application on your downloadable disk image. The permissions on the disk image are generally more restrictive and more in line with what I'd expect for an application bundle.
The new section I'm referring to is:
|Forum Jump||Forum Permissions
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot delete your posts in this forum
You cannot edit your posts in this forum
You cannot create polls in this forum
You cannot vote in polls in this forum