Prev: iRiver usb1-mac question
Next: LaCie Ethernet Disk mini
From: Bella Jones on 11 Jun 2005 05:14
Bonge Boo! <bingbong(a)spamcop.net> wrote:

> On 11/6/05 9:11 am, in article 1gxzhcx.cct4ub1r4o27fN%me9(a)privacy.net,
> "Bella Jones" <me9(a)privacy.net> wrote:
>
[.kext install without password]

> >>> Stop press - tried again and it worked. No password either. Oh well,
> >>> another mystery process...
> >>
> >> I'd be more than a little concerned if a .kext could be installed without a
> >> admin password...
> >
> > Hmm, well yes. If it is a trojan-type fecker, how will I know?
>
> I would have a clue, but the fact that you could put it into the /System
> folder without having to authenticate implies either the permission on
> /Sys/Lib/ext is wrong, or the installer is able to get elevated privilidges.
> Either of which is not good I wuld have thought.

Right. Just done apple+i...

My /System folder has owner 'System',and Access is' read only. (without
clicking the padlock), and Group is 'Wheel'. My /System/Library folder
is ditto.
But my /System/Library/Extensions folder has owner as '[me]', access is
'Read & Write' and Group is 'Staff'.

Sound OK?

--
bellajonez at yahoo dot co dot uk
From: Chris Ridd on 11 Jun 2005 05:19
On 11/6/05 10:14, in article 1gxzll6.1enz334nv6bziN%me9(a)privacy.net, "Bella
Jones" <me9(a)privacy.net> wrote:

> Bonge Boo! <bingbong(a)spamcop.net> wrote:
>
>> On 11/6/05 9:11 am, in article 1gxzhcx.cct4ub1r4o27fN%me9(a)privacy.net,
>> "Bella Jones" <me9(a)privacy.net> wrote:
>>
> [.kext install without password]
>
>>>>> Stop press - tried again and it worked. No password either. Oh well,
>>>>> another mystery process...
>>>>
>>>> I'd be more than a little concerned if a .kext could be installed without a
>>>> admin password...
>>>
>>> Hmm, well yes. If it is a trojan-type fecker, how will I know?
>>
>> I would have a clue, but the fact that you could put it into the /System
>> folder without having to authenticate implies either the permission on
>> /Sys/Lib/ext is wrong, or the installer is able to get elevated privilidges.
>> Either of which is not good I wuld have thought.
>
> Right. Just done apple+i...
>
> My /System folder has owner 'System',and Access is' read only. (without
> clicking the padlock), and Group is 'Wheel'. My /System/Library folder
> is ditto.
> But my /System/Library/Extensions folder has owner as '[me]', access is
> 'Read & Write' and Group is 'Staff'.

No. Mine's owned by root, which means that any administrator (ie me) is
forced to authenticate.

Repair your disk permissions.

Cheers,

Chris

From: Bella Jones on 11 Jun 2005 05:57
Chris Ridd <chrisridd(a)mac.com> wrote:

> On 11/6/05 10:14, in article 1gxzll6.1enz334nv6bziN%me9(a)privacy.net, "Bella
> Jones" <me9(a)privacy.net> wrote:
>
> > Bonge Boo! <bingbong(a)spamcop.net> wrote:
> >
> >> On 11/6/05 9:11 am, in article 1gxzhcx.cct4ub1r4o27fN%me9(a)privacy.net,
> >> "Bella Jones" <me9(a)privacy.net> wrote:
> >>
> > [.kext install without password]
> >
> > Right. Just done apple+i...
> >
> > My /System folder has owner 'System',and Access is' read only. (without
> > clicking the padlock), and Group is 'Wheel'. My /System/Library folder
> > is ditto.
> > But my /System/Library/Extensions folder has owner as '[me]', access is
> > 'Read & Write' and Group is 'Staff'.
>
> No. Mine's owned by root, which means that any administrator (ie me) is
> forced to authenticate.
>
> Repair your disk permissions.

Tis now done - and repaired. But odd because I did that a couple of
times yesterday and it must have not worked. So, just one thing about
permissions: in Disk Utility, in the left hand bit there's an icon of a
HD, saying '74.5 GB ST380011A', and then below it is my own HD icon.
Which should you highlight for repairing permissions?

--
bellajonez at yahoo dot co dot uk
From: Bonge Boo! on 11 Jun 2005 06:20
On 11/6/05 10:14 am, in article 1gxzll6.1enz334nv6bziN%me9(a)privacy.net,
"Bella Jones" <me9(a)privacy.net> wrote:

> But my /System/Library/Extensions folder has owner as '[me]', access is
> 'Read & Write' and Group is 'Staff'.

Really really bad idea. When you are logged in any application can write a
..kext.


From: Roger Merriman on 11 Jun 2005 06:42
Bella Jones <me9(a)privacy.net> wrote:

> Chris Ridd <chrisridd(a)mac.com> wrote:
>
> > On 11/6/05 10:14, in article 1gxzll6.1enz334nv6bziN%me9(a)privacy.net, "Bella
> > Jones" <me9(a)privacy.net> wrote:
> >
> > > Bonge Boo! <bingbong(a)spamcop.net> wrote:
> > >
> > >> On 11/6/05 9:11 am, in article 1gxzhcx.cct4ub1r4o27fN%me9(a)privacy.net,
> > >> "Bella Jones" <me9(a)privacy.net> wrote:
> > >>
> > > [.kext install without password]
> > >
> > > Right. Just done apple+i...
> > >
> > > My /System folder has owner 'System',and Access is' read only. (without
> > > clicking the padlock), and Group is 'Wheel'. My /System/Library folder
> > > is ditto.
> > > But my /System/Library/Extensions folder has owner as '[me]', access is
> > > 'Read & Write' and Group is 'Staff'.
> >
> > No. Mine's owned by root, which means that any administrator (ie me) is
> > forced to authenticate.
> >
> > Repair your disk permissions.
>
> Tis now done - and repaired. But odd because I did that a couple of
> times yesterday and it must have not worked. So, just one thing about
> permissions: in Disk Utility, in the left hand bit there's an icon of a
> HD, saying '74.5 GB ST380011A', and then below it is my own HD icon.
> Which should you highlight for repairing permissions?

you can repare permistions on eitehr as you could have more than one
partision on the disk. as you sound like you only have one? then i'd
guess it makes little odds?

roger
First  |  Prev  |  Next  |  Last
Pages: 1 2 3 4
Prev: iRiver usb1-mac question
Next: LaCie Ethernet Disk mini