sqlrob

I filed this with Apple about a week ago, and since they qualify it as "enhancement", I guess they wouldn't mind me publicizing it. It exists in both Tiger and Leopard, and is probably in every version of OS X.

If you run as a non-administrator (you are running as a non-administrator, right?), you aren't as secure as you should be. When you drag a new app to /Applications, Finder asks you for administrator logon credentials. This is all well and good, and is exactly what it should do. However, what happens next is not, and opens you up for other attacks. This dialog is used only for authorization. The credentials are not used again, and the owner of the application is the current, non-administrative user.

To put this in terms of what may happen. You run Firefox, and install it by copying to /Applications. Since it requires authentication to do this, you've increased your safety, or so you think. Now something takes advantage of an exploit, and tries to overwrite the firefox application to do it's nefarious work. Whoops, it succeeds, and your system is now compromised when it should have been protected. Even Windows gets installing as an alternate user correct, why doesn't Mac?

There is fortunately, a simple workaround. Unfortunately, there is not a "Mac" work around, as I just tested that and that has a security flaw as well. Open up Terminal.App, and use su, sudo and chown to set the proper permissions. I'm sorry for the instructions being a little vague, but I will write out a detailed, automated way so that it's regularly scheduled and no intervention necessary.

The "Mac" way would be to right click on the application, and set the owner in the info inspector. This unfortunately, has a net effect of exactly nothing. The ownership of the directory is changed, but the ownership of the contents is not. The ability of malicious software to change the binary is not in any way impacted.

Who do you think you are anyway? Microsoft?

How did an entire subsystem get broken in the next-to-latest security update?

For those of you that installed 2005-007, there's a version 1.1 of that patch out now that fixes the problem.

I bought God Of War Friday, and just got around to downloading the free soundtrack mentioned on the box. Or rather, trying to download. Nice lovely redirection to a page saying "IE 5.5, with Administrative access only"

Goddammit, Windows is *not* the only fucking OS in the world, and there's no mention of requiring Windows on the box or docs anywhere. Never mind the idiocy in requiring admin access.

While looking for jenbooks new Palm at Comp-USA, I decided to get Tron 2.0 for the Mac. This was the first Mac game I have purchased, with almost all my recent purchases being console games and one PC (a whole $0.25!) game.

So I start installing the game. Not once are any administrative privileges used by the installer. And after the install was done, all 2.5 G copied to the drive, the install CDs get put away. No need to use one to play.

Contrast this to the average PC game, where you oftentimes have to be administrator to run, never mind install. And need disks even after going through multi-gigabyte installs. And how long have NT class OSes been out so that permissions can be sorted out properly? And what valid (to me) reason does a game *ever* need administrative privileges?