Security settings on startup items

[Theilgaard]

Using the instauser package, I install 2 startup items, one is the instauser 10.5 script, used to populate the admin folder with template stuff. But when I boot into the image, and login as admin, I’m presented with a dialog;

An item in the Startup Items folder (“/Library/StartupItems/instauser”) does not have the proper security settings.

Then I can select to fix these. (Or “Decide Later” or “Disable). (I get this error on both items)

Is this the same as the 10.4 warning about improper privileges on the item, or do I have to tell the new 10.5 security mechanism that my StartupItems are OK?

The privileges on the items are as follows:

Macintosh:~ admin$ cd /Library/StartupItems/instauser/
Macintosh:instauser admin$ ls -al
total 16
drwxrwxr-x 4 root wheel 136 Mar 6 00:55 .
drwxr-xr-x 4 root wheel 136 Mar 7 04:18 ..
-rw-rw-r– 1 root wheel 163 Aug 8 2007 StartupParameters.plist
-rwxrwxr-x 1 root wheel 459 Mar 6 00:55 instauser
Macintosh:instauser admin$

It seems as if the Startupparameters.plist is missing execution rights, I will try this now.

[akinspe]

No I think you just have to remove group writable from instauser

chmod g-w /Library/StartupItems/instauser/instauser

the plist should NOT have execution rights

[Theilgaard]

When I login using the admin account, I’m presented with a dialog where I can fix the security settings (permissions I guess):

Before fix:

[code]Last login: Tue Mar 11 04:36:55 on console
Macintosh:~ admin$ cd /Library/StartupItems/
Macintosh:StartupItems admin$ ls -al
total 0
drwxr-xr-x 4 root wheel 136 Mar 11 03:03 .
drwxrwxr-t+ 50 root admin 1700 Mar 11 04:37 ..
drwxrwxr-x 4 root wheel 136 Mar 6 00:55 instauser
Macintosh:StartupItems admin$ ls -al instauser/
total 16
drwxrwxr-x 4 root wheel 136 Mar 6 00:55 .
drwxr-xr-x 4 root wheel 136 Mar 11 03:03 ..
-rw-rw-r– 1 root wheel 163 Aug 8 2007 StartupParameters.plist
-rwxrwxr-x 1 root wheel 459 Mar 6 00:55 instauser
[/code]

After fix:

[code]Macintosh:StartupItems admin$ ls -al ADBind/
Macintosh:StartupItems admin$ ls -al instauser/
total 16
drwxr-xr-x 4 root wheel 136 Mar 6 00:55 .
drwxr-xr-x 4 root wheel 136 Mar 11 03:03 ..
-rw-r–r– 1 root wheel 163 Aug 8 2007 StartupParameters.plist
-rwxr-xr-x 1 root wheel 459 Mar 6 00:55 instauser
[/code]

The strange part is that PackageMaker has set the incorrect settings using the “Apply Recomendations” function.

BTW: Does anybody know why the “Apply Recommendations” settings does not stick to the items, I have to set these settings each time I open the Package Maker project?

[code]

[Patrick Fergus]

I’d send Apple a bug report. However, Apple may not be very interested since they’re going away from StartupItems.

– Patrick

[Author]

Posts