Substantial Security Issue with the Mac Client
Elishah
✭
The "ZeniMax Online" directory and all its contents are 777. This means that even an entirely unprivileged user can make arbitrary changes to code that you will then subsequently run with your own permissions, with potentially catastrophic effects.
I would recommend a quick:
And unfortunately, you will probably need to do this again after every patch, since the patcher is likely to set things back to broken.
(This assumes that you're running it as a user in the admin group. If not, good on you, and you can no doubt figure out more relevant ownership.)
Installing software as world-writable is some embarrassingly amateur-hour nonsense.
I would recommend a quick:
sudo chown -R root:admin "/Applications/ZeniMax Online" sudo chmod -R o-w "/Applications/ZeniMax Online"
And unfortunately, you will probably need to do this again after every patch, since the patcher is likely to set things back to broken.
(This assumes that you're running it as a user in the admin group. If not, good on you, and you can no doubt figure out more relevant ownership.)
Installing software as world-writable is some embarrassingly amateur-hour nonsense.
1
-
Moonraker✭✭✭✭@Elishah For some reason the Install appears to implement different permissions and not sure why. Anyhow...
You better chat to Blizzard also because that's exactly how they set their World of Warcraft folder and contents the exact same way:drwxrwxrwx ZeniMax Online
drwxrwxrwx World of Warcraft drwxrwxrwx World of Warcraft Launcher.app
etc.
Blizzard:
Reset Game Folder & File Permissions
Repair Shared Folder Permissions
If it's not set like this then it causes issues when patching and with other Users using the game install.
I'm not saying you are wrong (I raised this question myself) just how it appears it is implemented.Edited by Moonraker on April 18, 2014 3:43AM0 -
Moonraker✭✭✭✭Just checked PC install which looks the same (too late to get my head around PC commands)
0