作者yllan (蓝永伦)
看板MAC
标题Re: MulderPatch 在 leopard 上的 workaround
时间Sat Oct 27 11:39:49 2007
※ 引述《yllan (蓝永伦)》之铭言:
: 据说这样就可以让 MulderPatch 在 Leopard 上再起...
: * 改放到 /Library/InputManagers
: * 改 owner 为 root, group 为 admin,权限为 755
: 推 EShensh:经测试… 无效... ╮(╯_╰)╭ 10/27 07:16
: 推 yllan:那请问你的 AlienBBS 权限是不是 wheel group 呢? 10/27 11:09
: → yllan:or root user/setuid/setgid 如果是的话改掉试试看~ 10/27 11:10
: 推 EShensh:drwxr-xr-x 3 eshensh eshensh 102 6 16 2006 Alie 10/27 11:12
: 推 EShensh:也改 root/admin 吗? 10/27 11:13
如果是这样就不用改了,app 的话要是 root/admin 是不行的~
那我猜是 MulderPatch 的权限没有完全改到,要把底下所有的档案都改成
root:admin, 755/644 才行... 也许你试试看底下黄色的那行指令?
sudo mkdir /Library/InputManagers
sudo mv ~/Library/MulderPath /Library/InputManagers
sudo chown -R root:admin /Library/InputManagers
根据 AppKit Release Note, 要能 run 起来有以下这些限制(汗):
(因为 InputManager 本来就是一个很大的安全性漏洞,要能让他比较安全
就要很麻烦的权限)
* The valid installation is now restricted to the
/Library/InputManagers folder only. Bundles in other locations are
silently ignored.
* All the files in the bundle and /Library/InputManagers folder
itself must be owned by the root user and admin group. No files
inside the bundle can have group or other write permissions.
* Processes running with the root privilege (getuid() == 0 or
geteuid() == 0) cannot load any bundle input manager.
* Processes running with the wheel group privilege cannot load any
bundle input manager.
* The process must be in the active workspace session at the time of
loading the bundles.
* The process must not be tainted by changing user or group id
(checked by issetugid()).
* No 64-bit processes can load any bundle input managers.
--
※ 发信站: 批踢踢实业坊(ptt.cc)
◆ From: 140.112.31.3
1F:推 Veshion:成功了...感动...! 11/14 17:29