[MacPorts] #30992: virtualbox: enable hardening

MacPorts noreply at macports.org
Sat Sep 10 19:58:50 PDT 2011


#30992: virtualbox: enable hardening
--------------------------------------+-------------------------------------
  Reporter:  ryandesign@…             |       Owner:  rmstonecipher@…           
      Type:  enhancement              |      Status:  closed                    
  Priority:  Normal                   |   Milestone:                            
 Component:  ports                    |     Version:  2.0.1                     
Resolution:  fixed                    |    Keywords:                            
      Port:  virtualbox               |  
--------------------------------------+-------------------------------------

Comment(by ecronin@…):

 Replying to [comment:31 carsomyr@…]:
 > > * You also need to check that no part of the path is a+w like comment
 1 part 6 says.
 >
 > Does this warrant action?  The correct permissions for MacPorts
 VirtualBox just are; they're a consequence of the build process, and I've
 verified that none of them are a+w.
 >
 > -Roy

 The build process changes the permissions of /Applications or
 /Users/username if they've been made o+w for some reason?  What MacPorts
 installs into its directories is correct, but it has no control over what
 is before it in the hierarchy and VirtualBox cares about that.  Don't
 count on users always knowing what they're doing, e.g.
 http://stackoverflow.com/questions/663089/unable-to-make-applications-
 folder-writeable-in-mac (from personal experience, OS 9 transplants used
 to love doing this to make it more familiar; they'd throw the -R flag in
 too for good measure.  Plenty of bad advice on how to "fix" things exists
 in Google still)

-- 
Ticket URL: <https://trac.macports.org/ticket/30992#comment:32>
MacPorts <http://www.macports.org/>
Ports system for Mac OS


More information about the macports-tickets mailing list