root/admin authorization and PackageMaker

 
Thread Tools Search this Thread
Operating Systems OS X (Apple) root/admin authorization and PackageMaker
# 1  
Old 03-03-2004
root/admin authorization and PackageMaker

I am building an installable package (.pkg) with PackageMaker 1.1.11 (that's the one that comes with Panther).
The package is for installing things both to /Applications and to some folders in /Library (/Library/StartupItems and a new folder that I'm putting in /Library).
I do (obviously) not choose Overwrite (directory) permissions.
I am putting the whole stuff together as recommended, mirroring the actual directory structure in the folder I am building my package from, choosing a Default Location of /, making it non-relocatable.
I am permissioning my "source" folder in the exact way that I want the files to be later -- mostly root:admin with rwxrwxr-x and rw-rw-r--. (Admins should be allowed to muck around with it, but no one else.)
Now I have two choices: I can either select Admin Authorization or Root Authorization as the Authorization Action.
(No Authorization Required obviously wouldn't do what I want.)

I am unsure which one of the two to choose, and what the effective difference is between them (if any).

Now, no jumping to conclusions here, please folks.
I do know the difference between an admin and the root account.
HOWEVER:The Developer documentation states (under "Authorization, File Ownership, and Permissions"):

Quote:
Even if a package specifies root authorization, a user can authenticate by supplying the administrator password and can then install the software.
(Emphasis by me.)

It further says:

Quote:
If authorization is required, the files are owned by the owner specified in the files archive within the package, regardless of the user and password supplied to complete the authentication.
and:

Quote:
Authorization should be set to root if any component needs to be set to root.
(Emphasis by me.)

Now, maybe I am getting this wrong, but it seems to me that this means that there is virtually no effective difference between asking for root or admin authorization in this scenario (the only difference being that according to Table 12-1 in the said documentation, requiring Root Authorization will promt an admin user to enter their password,
whereas requiring just Admin Authorization would not prompt an admin user.

Am I right?
Is that the only difference?
Is it otherwise inconsequential whether I ask for Root or Admin authorization in this scenario?

Help on this is MUCH appreciated.

rop
# 2  
Old 03-03-2004
If you have no test machine and/or test boot volume to attempt installation and running the installed software on, then you might want to see about enlisting the support of someone that does (not volunteering Smilie Smilie )

In reality, safety first. If you do not need to provide root privileges to run your app, the Admin authorization is probably what you should use. Escalation to root should only be used when required.

I would think that the difference would be akin to the ramifications of "su -" vs. "sudo".

Sorry I don't have definitive (or maybe even correct) answer to your question. I believe that this installation privileges issue is applicable to any of the Unix threads here, so you may want to try the programming and advanced forums if you don't get a better response than mine.
# 3  
Old 03-03-2004
Quote:
Originally posted by [MA]Flying_Meat
Sorry I don't have definitive (or maybe even correct) answer to your question.
You're very welcome, any thoughts on this are very welcome. Smilie
# 4  
Old 03-04-2004
I don't know for certain if the below is the only difference, nor am I sure how it relates to package installation, but here's my crack at it:

In OSX, root is the same as almost all other Unix systems. Administrator is almost as good. In OSX, an Administrator is in the admin group, which allows them to run "sudo", to run commands as root.

Now, knowing the little I do know about OSX, I do know root is not enabled by default. Administrator is. Depending on the administrator scripts, you may be able to require admin privelages, and sudo your commands.

Either way, they'll be prompted for either an admin, or the root, login. My gut instinct would tell me to go with administration requirements, not root.
# 5  
Old 03-04-2004
Quote:
Originally posted by LivinFree
I do know root is not enabled by default. Administrator is. Depending on the administrator scripts, you may be able to require admin privelages, and sudo your commands.

Either way, they'll be prompted for either an admin, or the root, login. My gut instinct would tell me to go with administration requirements, not root.
very excellent point, indeed! Smilie nice catch!

(though, that begs the musical question, if root being enabled or not could cause an installation to go belly up, how does Apple manage updates?
i'd guess from the melodious query that root is not a requirement for nearly every install...)
Login or Register to Ask a Question

Previous Thread | Next Thread

8 More Discussions You Might Find Interesting

1. AIX

Change "root" to "root.admin" in outgoing e-mails

Our AIX servers send e-mails which have the "from" address set to "root@company.com" for our root user ("C{M}company.com" in /etc/sendmail.cf). The problem is that when bad e-mails are sent out or rejected by remote servers, they are being returned and delivered to e-mail box of "Mary Root". ... (2 Replies)
Discussion started by: kah00na
2 Replies

2. What is on Your Mind?

Regarding Admin life either as DBA or UNIX Linux admin

I am planning to choose my career as Unix/Linux Admin or a DBA. But I have come to know from forums and few admins like the job will be 24/7. I have few questions on that. Can we get "DAY" shifts in any one of the admin Job ? Can't we have shift timings in any company ? Eventhough the... (7 Replies)
Discussion started by: Jacktts
7 Replies

3. UNIX for Dummies Questions & Answers

Read authorization for everybody on sub-directory owned by root

Hello. On my family laptop, I have a directory named /local. It is owned by root. I want to create a sub-directory named documents ( /local/documents ). I want to exclude exec for every body in that directory I want every authenticated linux user can create a sub directory ( ie :... (7 Replies)
Discussion started by: jcdole
7 Replies

4. What is on Your Mind?

Windows Admin switching to *nix Admin

I'm currently a Windows admin and have wanted to jump ship to the *nix side for a while now. I've been studying both through an lpic level 1 manual as I have time (focusing on debian), and a solaris 10 cert book. The problem is I only have a handful of hours a week to study, and my current job... (3 Replies)
Discussion started by: bobwilson
3 Replies

5. Gentoo

help|how to rest my password admin(root)

i have gentoo and i dont know what is my password user admin(root) how i can to rest my passord? thanks. (2 Replies)
Discussion started by: turivnkl
2 Replies

6. Programming

C NTLM Authorization via HTTP

Greetings, I am writing a C socket application that needs NTLM authorization before it can post HTTP requests, and I am having trouble with NTLM authorization messages. :b: I've found the following urls extremely valuable for creating message functions: Davenport WebDAV-SMB Gateway... (1 Reply)
Discussion started by: edvin
1 Replies

7. UNIX for Dummies Questions & Answers

Root admin info

(Very New to UNIX- Solaris world) I have my Solaris 10 system built, and can login using root. This root user is a super type of admin user as I understand it. 1.My question is do UNIX admins usually use this account for all admin tasks or do they use another account similar to this... (2 Replies)
Discussion started by: deedaz
2 Replies

8. UNIX for Dummies Questions & Answers

root/admin commands in LINUX

Hi I am working on LINUX shell scripting. I have root privileges and I know some basic root/admin commands like user creation, modification and so on. Till last week i was able to create users but now i am not able to create users or groups. When I give the command i got an error as ... (6 Replies)
Discussion started by: naina
6 Replies
Login or Register to Ask a Question