Mac Sandbox: Security fixes for Mac OS 10.6 Snow Leopard

svn path=/trunk/boinc/; revision=18981
This commit is contained in:
Charlie Fenton 2009-09-02 02:32:30 +00:00
parent d34c522d74
commit 054fbf6200
3 changed files with 8 additions and 4 deletions

View File

@ -7435,5 +7435,8 @@ Charlie 1 Sept 2009
BOINCGUIApp.cpp BOINCGUIApp.cpp
mac/ mac/
SetupSecurity.cpp SetupSecurity.cpp
mac_build/
Mac_SA_Insecure.sh
Mac_SA_Secure.sh
mac_installer/ mac_installer/
PostInstall.cpp PostInstall.cpp

View File

@ -41,7 +41,8 @@
# the --insecure option. # the --insecure option.
# NOTE: running BOINC with security disabled is not recommended. # NOTE: running BOINC with security disabled is not recommended.
# #
# Last updated 10/2/07 # Last updated 9/1/09 for BOINC version 6.8.17 and 6.10.3
# WARNING: do not use this script with older versions of BOINC
function remove_boinc_users() { function remove_boinc_users() {
name=$(dscl . search /users RecordName boinc_master | cut -f1 -s) name=$(dscl . search /users RecordName boinc_master | cut -f1 -s)
@ -109,7 +110,7 @@ fi
if [ -x /Applications/BOINCManager.app/Contents/MacOS/BOINCManager ] ; then if [ -x /Applications/BOINCManager.app/Contents/MacOS/BOINCManager ] ; then
chown ${user}:${group} /Applications/BOINCManager.app/Contents/MacOS/BOINCManager chown ${user}:${group} /Applications/BOINCManager.app/Contents/MacOS/BOINCManager
chmod -R u+r-w+s,g+r-ws,o+r-ws /Applications/BOINCManager.app/Contents/MacOS/BOINCManager chmod -R u+r-ws,g+r-ws,o+r-ws /Applications/BOINCManager.app/Contents/MacOS/BOINCManager
fi fi
if [ -x /Applications/BOINCManager.app/Contents/Resources/boinc ] ; then if [ -x /Applications/BOINCManager.app/Contents/Resources/boinc ] ; then

View File

@ -62,7 +62,7 @@
# sudo dscl . -delete /groups/boinc_master users mary # sudo dscl . -delete /groups/boinc_master users mary
# #
# Last updated 4/2/09 for BOINC version 6.7 # Last updated 9/1/09 for BOINC version 6.8.17 and 6.10.3
# WARNING: do not use this script with older versions of BOINC # WARNING: do not use this script with older versions of BOINC
function make_boinc_user() { function make_boinc_user() {
@ -223,7 +223,7 @@ if [ -f ss_config.xml ] ; then
fi fi
if [ -x /Applications/BOINCManager.app/Contents/MacOS/BOINCManager ] ; then if [ -x /Applications/BOINCManager.app/Contents/MacOS/BOINCManager ] ; then
set_perm /Applications/BOINCManager.app/Contents/MacOS/BOINCManager boinc_master boinc_master 2555 set_perm /Applications/BOINCManager.app/Contents/MacOS/BOINCManager boinc_master boinc_master 0555
fi fi
if [ -x /Applications/BOINCManager.app/Contents/Resources/boinc ] ; then if [ -x /Applications/BOINCManager.app/Contents/Resources/boinc ] ; then