Shirt Pocket Discussions  
    Home netTunes launchTunes SuperDuper! Buy Now Support Discussions About Shirt Pocket    

Go Back   Shirt Pocket Discussions > SuperDuper! > General

Reply
 
Thread Tools Rate Thread Display Modes
  #1  
Old 08-12-2004, 06:00 PM
sjk's Avatar
sjk sjk is offline
Registered User
 
Join Date: May 2004
Location: Eugene
Posts: 252
minor installation-related issues

A few observations:

* All files/directories in the SuperDuper! package are world (and group) writable.

* Running the built-in updater changes the group ID of files to group staff.

* The image background in the distribution package says:

To install or update:
Drag to Applications and run!


The "Copy applications, sharing non-Apple" copy script contains:

Code:
<dict>
        <key>Directive</key>
        <string>symlink</string>
        <key>Item</key>
        <string>Applications/Utilities/SuperDuper!</string>
</dict>
Probably best for the location to be consistent?
Reply With Quote
  #2  
Old 08-12-2004, 06:10 PM
dnanian's Avatar
dnanian dnanian is offline
Administrator
 
Join Date: Apr 2001
Location: Weston, MA
Posts: 14,752
Send a message via AIM to dnanian
We made the files and directories world writable to allow for drag-and-drop update -- otherwise, you get an error when you try (and authenticating doesn't always seem to work). I'm not sure why the group is changed to staff, though: we'll take a look at that and see what we can fix.

Yes, the image does say drag to Applications (though you can put it anywhere, really -- we're trying to suggest, not insist) -- but the real problem there is the script, which shouldn't have that entry in it at all any more. We'll get rid of it.

Thanks!
__________________
--Dave Nanian
Reply With Quote
  #3  
Old 08-12-2004, 07:09 PM
sjk's Avatar
sjk sjk is offline
Registered User
 
Join Date: May 2004
Location: Eugene
Posts: 252
Quote:
Originally Posted by dnanian
We made the files and directories world writable to allow for drag-and-drop update -- otherwise, you get an error when you try (and authenticating doesn't always seem to work).
For the first drag-and-drop install the installing account will need write permission to the target directory, correct? After that, are you saying any drag-and-drop updates could then be done by any user, even though SuperDuper!'s parent directory may be unwritable to that user?

I've done all SD! installs/updates while logged in as an admin account drag-and-drop installs to /Applications work without authenticating, but the updater required authentication to run its package installer (just this morning, for the current version).

Re: group staff. The bom shows files as being gid 20 (staff):

Code:
% lsbom Archive.bom | head -5
.       40755   501/20
./.DS_Store     100644  501/20  6148    2264754351
./SuperDuper!.app       40777   501/20
./SuperDuper!.app/Contents      40777   501/20
./SuperDuper!.app/Contents/Info.plist   100666  501/20  2093    3535751084
Whatever group is chosen would probably differ from the original one after a drag-and-drop install/update. Not sure about the uid (501) since that matches my admin account uid. Maybe uid 0 (root) and gid 80 (admin) are better choices for "systemish" software like this (even if a followup drag-and-drop would change 'em)? Oh, and maybe remove that .DS_Store file?

Maybe drag-and-drop installs/updates and package updates with secure file/directory permissions, from admin and/or non-admin accounts, aren't possible with certain combinations. Since I've done all installs/updates from an admin account I'm not as aware of issues with them from a non-admin account. From that admin-centric install/update view I see SuperDuper! as one of the few apps on my system with world-writable permissions and it seemed ironic for backup software to be that way.
Reply With Quote
  #4  
Old 08-12-2004, 07:18 PM
dnanian's Avatar
dnanian dnanian is offline
Administrator
 
Join Date: Apr 2001
Location: Weston, MA
Posts: 14,752
Send a message via AIM to dnanian
We're going to have to re-examine exactly what we can and can't do in this situation. We tried a bunch of things that didn't work, and found the user had to delete the bundle even though they owned it, which was more than a bit weird.

Yeah, and we'll get rid of the stupid .DS_Store file, which should have automatically been done by XCode, but must not have been...
__________________
--Dave Nanian
Reply With Quote
  #5  
Old 08-12-2004, 08:12 PM
sjk's Avatar
sjk sjk is offline
Registered User
 
Join Date: May 2004
Location: Eugene
Posts: 252
Thanks, Dave. There are probably differences between 10.2 and 10.3 behavior to consider, too.
Reply With Quote
  #6  
Old 08-13-2004, 10:45 AM
dnanian's Avatar
dnanian dnanian is offline
Administrator
 
Join Date: Apr 2001
Location: Weston, MA
Posts: 14,752
Send a message via AIM to dnanian
Yep, probably. It's not hugely high priority, but we'll definitely take a look next cycle.
__________________
--Dave Nanian
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Server screen saver issues denisg General 7 06-13-2004 12:49 PM
unclear about some usage issues camner General 7 04-02-2004 09:57 PM
New version (build 54) is out; solves both issues. dnanian General 0 01-13-2004 07:41 AM


All times are GMT -4. The time now is 09:44 AM.


Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2021, vBulletin Solutions, Inc.