Welcome to MacForumz.com!
FAQFAQ   SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Security Update 2008-001 and permissions

 
   Macintosh computer (Home) -> System RSS
Related Topics:
Security updates 001-2008? - I have a question on Security update 001-2008. Is it just for TIger, or is it for both Tiger and Leopard? The Apple website says "OS 10.4.11 or WHen I run Software Update, I don't get any message saying I need to download anything else. -- ..

Security Update 2004-06-07 - Apple's got a new security update that looks like it's meant to address the recent URI security exploits. Looks like updating to how decides whether to run an based on a URI, along with disabling disk:// URIs, and some other..

Security Update 2004-06-07 - This looks like the real fix for the Launch Services security hole. Available via Software Update or Jaguar (10.2.8) Panther

Security updATE - I JUST RECENT AND INSTALLED THAT SECURITY UPDATE THAT WAS MADE AND I THINK AOL HAS BEEN ACTING A LITTLE FUNKY EVER SINCE. ANYBODY ELSE HAVE ANY PROBLEMS WITH THAT UPDATE?

More on Security Update 2006-007 - Well, I am pleased to say that our Airport Extreme & problems appear to have been resolved by the second 2006-007 Security Update that showed up on my Software Update and by a new Airport Extreme Update that showed up on my..
Next:  Mac Pro 3.2GHz Ram Installation Video - Where?  
Author Message
David Ryeburn

External


Since: Jan 27, 2004
Posts: 47



(Msg. 1) Posted: Sun Feb 17, 2008 8:00 pm
Post subject: Security Update 2008-001 and permissions
Archived from groups: comp>sys>mac>system (more info?)

I recently applied Security Update 2008-001 for Mac OS X 10.4.11 to eight
different installations, some PPC and some Intel, and upon repairing
permissions with Disk Utility, read the following:

"Permissions differ on ./Library/Application Support/Macromedia/Shockwave
10/Shockwave 10 Preferences, should be -rwxrwxr-x, they are -rw-rw-r--".

The first time I noticed this I assumed it was a fluke. After the second
time I became more suspicious. Before doing the third installation I checked
permissions on the file in question, which were -rwxrwxr-x, and then without
running Disk Utility checked them immediately after rebooting. They had
indeed been changed to -rw-rw-r-- so I changed them back manually, then ran
Disk Utility in repair permissions mode, and Disk Utility was happy.

Can anyone explain why the installation of an Apple Security Update should
result in changed permissions for a Shockwave preferences file? I'm no
longer surprised when software from Adobe messes around with permissions for
non-Adobe files, so perhaps this is just an example of "if you step on my
foot, I'll step on yours",

David

--
David Ryeburn
ryeburn.TakeThisOut@sfu.caz
To send e-mail, use "ca" instead of "caz".

 >> Stay informed about: Security Update 2008-001 and permissions 
Back to top
Login to vote
Jolly Roger

External


Since: Sep 09, 2006
Posts: 3096



(Msg. 2) Posted: Mon Feb 18, 2008 1:01 am
Post subject: Re: Security Update 2008-001 and permissions [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

In article <ryeburn-9173DE.20000417022008.TakeThisOut@morgoth.sfu.ca>,
David Ryeburn <ryeburn.TakeThisOut@sfu.caz> wrote:

> I recently applied Security Update 2008-001 for Mac OS X 10.4.11 to eight
> different installations, some PPC and some Intel, and upon repairing
> permissions with Disk Utility, read the following:
>
> "Permissions differ on ./Library/Application Support/Macromedia/Shockwave
> 10/Shockwave 10 Preferences, should be -rwxrwxr-x, they are -rw-rw-r--".
>
> The first time I noticed this I assumed it was a fluke. After the second
> time I became more suspicious.

The reason you see this message is that the receipt for ShockWave in
/Library/Receipts lists the executable permission as enabled for user,
group, and other on this file.

One would think that -rw-rw-r--, being more restrictive, would be more
secure. So it seems strange that the receipt for this file would have
execute permissions enabled for all users.

> Before doing the third installation I checked
> permissions on the file in question, which were -rwxrwxr-x, and then without
> running Disk Utility checked them immediately after rebooting. They had
> indeed been changed to -rw-rw-r-- so I changed them back manually, then ran
> Disk Utility in repair permissions mode, and Disk Utility was happy.
>
> Can anyone explain why the installation of an Apple Security Update should
> result in changed permissions for a Shockwave preferences file? I'm no
> longer surprised when software from Adobe messes around with permissions for
> non-Adobe files, so perhaps this is just an example of "if you step on my
> foot, I'll step on yours",

I'm sure Shockwave or some other Adobe stuff that runs at startup is
setting the permissions on that file to be more restrictive. This is a
good thing, in my mind. It means if you screw up the permissions, they
will be fixed on the next startup.

You might consider removing execute permissions for this file from the
receipt. Again, the receipts are in /Library/Receipts.

--
Note: Please send all responses to the relevant news group. If you
must contact me through e-mail, let me know when you send email to
this address so that your email doesn't get eaten by my SPAM filter.

JR

 >> Stay informed about: Security Update 2008-001 and permissions 
Back to top
Login to vote
Little Sir Echo

External


Since: Jan 28, 2008
Posts: 37



(Msg. 3) Posted: Mon Feb 18, 2008 2:41 am
Post subject: Re: Security Update 2008-001 and permissions [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

On 17-Feb-2008, David Ryeburn <ryeburn DeleteThis @sfu.caz> wrote:

> I recently applied Security Update 2008-001 for Mac OS X 10.4.11 to eight
> different installations, some PPC and some Intel, and upon repairing
> permissions with Disk Utility, read the following:
>
> "Permissions differ on ./Library/Application Support/Macromedia/Shockwave
> 10/Shockwave 10 Preferences, should be -rwxrwxr-x, they are -rw-rw-r--".

I observed the same thing on my PowerMac G5.
 >> Stay informed about: Security Update 2008-001 and permissions 
Back to top
Login to vote
billy

External


Since: Dec 02, 2005
Posts: 44



(Msg. 4) Posted: Mon Feb 18, 2008 1:57 pm
Post subject: Re: Security Update 2008-001 and permissions [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

David Ryeburn <ryeburn.RemoveThis@sfu.caz> writes:

> Can anyone explain why the installation of an Apple Security Update should
> result in changed permissions for a Shockwave preferences file? I'm no
> longer surprised when software from Adobe messes around with permissions for
> non-Adobe files, so perhaps this is just an example of "if you step on my
> foot, I'll step on yours",

If it's inside an Apple supplied update, the responsibility is Apple's.

Billy Y..
 >> Stay informed about: Security Update 2008-001 and permissions 
Back to top
Login to vote
David Ryeburn

External


Since: Jan 27, 2004
Posts: 47



(Msg. 5) Posted: Fri Feb 22, 2008 12:00 am
Post subject: Re: Security Update 2008-001 and permissions [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

In article
<jollyroger-3B407F.01014318022008 RemoveThis @earthlink.vsrv-sjc.supernews.net>,
Jolly Roger <jollyroger RemoveThis @pobox.com> wrote:

> In article <ryeburn-9173DE.20000417022008 RemoveThis @morgoth.sfu.ca>,
> David Ryeburn <ryeburn RemoveThis @sfu.caz> wrote:
>
> > I recently applied Security Update 2008-001 for Mac OS X 10.4.11 to eight
> > different installations, some PPC and some Intel, and upon repairing
> > permissions with Disk Utility, read the following:
> >
> > "Permissions differ on ./Library/Application Support/Macromedia/Shockwave
> > 10/Shockwave 10 Preferences, should be -rwxrwxr-x, they are -rw-rw-r--".
> >
> > The first time I noticed this I assumed it was a fluke. After the second
> > time I became more suspicious.
>
> The reason you see this message is that the receipt for ShockWave in
> /Library/Receipts lists the executable permission as enabled for user,
> group, and other on this file.
>
> One would think that -rw-rw-r--, being more restrictive, would be more
> secure. So it seems strange that the receipt for this file would have
> execute permissions enabled for all users.
>
> > Before doing the third installation I checked
> > permissions on the file in question, which were -rwxrwxr-x, and then
> > without
> > running Disk Utility checked them immediately after rebooting. They had
> > indeed been changed to -rw-rw-r-- so I changed them back manually, then
> > ran
> > Disk Utility in repair permissions mode, and Disk Utility was happy.
> >
> > Can anyone explain why the installation of an Apple Security Update should
> > result in changed permissions for a Shockwave preferences file? I'm no
> > longer surprised when software from Adobe messes around with permissions
> > for
> > non-Adobe files, so perhaps this is just an example of "if you step on my
> > foot, I'll step on yours",
>
> I'm sure Shockwave or some other Adobe stuff that runs at startup is
> setting the permissions on that file to be more restrictive. This is a
> good thing, in my mind. It means if you screw up the permissions, they
> will be fixed on the next startup.

An interesting theory, but this computer has been restarted, as well as shut
down completely and later started, a number of times since I applied the
Security Update and did the permissions check and repair. The permissions
for that file have remained -rwxrwxr-x. So nothing is resetting them to
-rw-rw-r-- (other than the Apple Security Update, which I have not
re-applied).

> You might consider removing execute permissions for this file from the
> receipt. Again, the receipts are in /Library/Receipts.

That's certainly where I would expect to find the receipt. The Receipts
folder has 133 items in it. None of them appear to be likely candidates.
Looking at the names of the files, the words "Adobe", "Macromedia", and
"Shockwave" just aren't there at all. This computer has an additional
partition on its hard drive, for repair purposes. It has system software and
every repair utility that I have, and not much else. But it does have the
Adobe Macromedia Shockwave stuff (version 10.1.1r16). Like all the other
partitions on my other computers and external, bootable Firewire drives, the
repair partition suffered the same change of permissions upon installing the
Apple Security Update, with the permissions then restored, in some cases by
Disk Utility and in some cases pre-emptively by me once I discovered this.
None of the other copies of the Shockwave 10 Preferences file that I have
checked have been re-set to -rw-rw-r-- (but I haven't checked all eight of
them). So the mystery remains.

David

--
David Ryeburn
ryeburn RemoveThis @sfu.caz
To send e-mail, use "ca" instead of "caz".
 >> Stay informed about: Security Update 2008-001 and permissions 
Back to top
Login to vote
Display posts from previous:   
   Macintosh computer (Home) -> System All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]