Changeset 23329

Timestamp:

08/06/07 08:24:48 (16 months ago)

Author:

zarzycki@…

Message:

<rdar://problem/5385870> 9A510: SystemStarter: shouldn't require user write bit on startup items

Files:

• trunk/launchd/src/StartupItems.c (modified) (1 diff)

trunk/launchd/src/StartupItems.c

@@ -230 +230 @@
                 r = false;
         }
-        if ((aStatBuf.st_mode & ALLPERMS) & ~(S_IRWXU | S_IRGRP | S_IXGRP | S_IROTH | S_IXOTH)) {
-                syslog(LOG_WARNING, "\"%s\" failed security check: permissions", aPath);
+        if (aStatBuf.st_mode & S_IWOTH) {
+                syslog(LOG_WARNING, "\"%s\" failed security check: world writable", aPath);
+                r = false;
+        }
+        if (aStatBuf.st_mode & S_IWGRP) {
+                syslog(LOG_WARNING, "\"%s\" failed security check: group writable", aPath);
                 r = false;
         }