PackageMaker set owner and permissions

In article
<18242B5A-2004-4285-B740-ED798693A5B3%edv@zschocke-berlin.de>,
Florian Umlotl <edv DeleteThis @zschocke-berlin.de> wrote:

> Hi NG
>
> How can I set the right values for my app in the packagemaker.
> I guess it has to be root:admin and 775 for a normal app.

755 is more common. Apple does 775 for some reason, but IMO there's
relatively little reason for anyone other than the owner to have 'write'
on a properly-written app.

G

--
I saw a truck today that had "AAA Batteries / Delivered and Installed" on the
side. My first thought was: That's a really weird business model. How many
inept people have urgent need of skinny little battery cells?

Gregory Weston <uce.RemoveThis@splook.com> schrieb:


>
> 755 is more common. Apple does 775 for some reason, but IMO there's
> relatively little reason for anyone other than the owner to have 'write'
> on a properly-written app.
>
I took a look in applications. The most is 755. I guess the reason is that
you don't have to authenticate if you want to delete it (as admin)?
Also, perhaps it is dangerous if you have to run a installer as root?

Thanx Florian.

P.S.: My PackageMaker dose not show the curios behavior anymore. I had to
repair the permissions on the disk (in this case that really fixed
something). I don't understand how the packagemaker was influenced by the
permissions on the disk. Now, if I click on content, the right owner and
permissions are shown (and are set if you click on "Apply Recommendations").

Florian Zschocke <edv.RemoveThis@zschocke-berlin.de> schrieb:

> Gregory Weston <uce.RemoveThis@splook.com> schrieb:
>
>
>>
>> 755 is more common. Apple does 775 for some reason, but IMO there's
>> relatively little reason for anyone other than the owner to have 'write'
>> on a properly-written app.
>>
> I took a look in applications. The most is 755. I guess the reason is that
Sorry ^^^
I meant 775. Most in applications is 775.

Florian

In article
<6AE94E0B-7B30-4DC8-B945-15A854A2A974%edv@zschocke-berlin.de>,
Florian Zschocke <edv DeleteThis @zschocke-berlin.de> wrote:

> Florian Zschocke <edv DeleteThis @zschocke-berlin.de> schrieb:
>
> > Gregory Weston <uce DeleteThis @splook.com> schrieb:
> >
> >
> >>
> >> 755 is more common. Apple does 775 for some reason, but IMO there's
> >> relatively little reason for anyone other than the owner to have 'write'
> >> on a properly-written app.
> >>
> > I took a look in applications. The most is 755. I guess the reason is that
> Sorry ^^^
> I meant 775. Most in applications is 775.
>
> Florian

Sure. But how does the ratio work out when you ignore Apple's apps?

The ability to delete (aka "move to another directory") is more related
to your rights on the source and destination (/Applications and
~/.Trash, for example) than to your rights on the item being moved.

--
I saw a truck today that had "AAA Batteries / Delivered and Installed" on the
side. My first thought was: That's a really weird business model. How many
inept people have urgent need of skinny little battery cells?

Gregory Weston <uce RemoveThis @splook.com> schrieb:


> Sure. But how does the ratio work out when you ignore Apple's apps?
>
> The ability to delete (aka "move to another directory") is more related
> to your rights on the source and destination (/Applications and
> ~/.Trash, for example) than to your rights on the item being moved.
>

At least the hole Adobe stuff is also 775. PackageMaker calls 775
"Recomendations". But I really I don't have a good knowledge about these
security related things. I hoped it would do for me and it did clear wrong.
Now I believe it got confused because I use a mobile (OSX Server) account.
I think the OpenDirectory changed the group form admin to staff e.c.t.
What is sure, is that it is affected be the existing permissions and group-
ids and from my feeling that is wrong (or a bug). It should set the
applications with destination /Applications to root:admin and 775 or 755.

Thanx Florian