mirror of https://github.com/BOINC/boinc.git
Update Mac_SA_Secure.sh script.
svn path=/trunk/boinc/; revision=14593
This commit is contained in:
parent
79d8c0420f
commit
ee4b93663d
|
@ -687,6 +687,7 @@ Charlie Jan 17 2008
|
|||
check_security.C
|
||||
clientgui/
|
||||
mac/
|
||||
Mac_SA_Secure.sh
|
||||
SetupSecurity.cpp
|
||||
doc/
|
||||
sandbox.php
|
||||
|
|
|
@ -17,7 +17,7 @@
|
|||
# To view the GNU Lesser General Public License visit
|
||||
# http://www.gnu.org/copyleft/lesser.html
|
||||
# or write to the Free Software Foundation, Inc.,
|
||||
# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
||||
# 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
||||
|
||||
# Make a BOINC installation "secure" on a Macintosh with stand-alone BOINC Client
|
||||
# The BOINC installer does this for a Macintosh installation with BOINC Manager;
|
||||
|
@ -64,7 +64,7 @@
|
|||
# sudo dscl . -delete /groups/boinc_master users mary
|
||||
#
|
||||
|
||||
# Last updated 10/2/07 for BOINC version 5.10.21 and later
|
||||
# Last updated 1/17/08 for BOINC version 5.10.38
|
||||
# WARNING: do not use this script with older versions of BOINC
|
||||
|
||||
function make_boinc_user() {
|
||||
|
@ -182,7 +182,7 @@ dscl . -merge /groups/boinc_master users "$(LOGNAME)"
|
|||
dscl . -merge /groups/boinc_project users "$(LOGNAME)"
|
||||
|
||||
set_perm_recursive . boinc_master boinc_master u+rw,g+rw,o+r-w
|
||||
set_perm . boinc_master boinc_master 0775
|
||||
set_perm . boinc_master boinc_master 0771
|
||||
if [ -f gui_rpc_auth.cfg ] ; then
|
||||
set_perm gui_rpc_auth.cfg boinc_master boinc_master 0660
|
||||
fi
|
||||
|
@ -228,12 +228,4 @@ if [ -x /Applications/BOINCManager.app/Contents/Resources/boinc ] ; then
|
|||
set_perm /Applications/BOINCManager.app/Contents/Resources/boinc boinc_master boinc_master 6555
|
||||
fi
|
||||
|
||||
# Version 6 screensaver has its own embedded switcher application, but older versions don't.
|
||||
# We don't allow unauthorized users to run the switcher application in the BOINC Data directory
|
||||
# because they could use it to run as user & group boinc_project and damage project files.
|
||||
# The screensaver's switcher application has very limited functionality to avoid this risk.
|
||||
if [ -x "/Library/Screen Savers/BOINCSaver.saver/Contents/Resources/gfx_switcher" ] ; then
|
||||
set_perm "/Library/Screen Savers/BOINCSaver.saver/Contents/Resources/gfx_switcher" root boinc_master 4555
|
||||
fi
|
||||
|
||||
|
||||
|
|
Loading…
Reference in New Issue