Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

improve helper security and install location #33

Conversation

ghostflyby
Copy link

安全相关

helper

  1. 更改 helper 安装位置为 /Library/Application Support/IconChanger
  2. 将安装脚本嵌入可执行二进制
  3. 更改对应的构建流程
  4. 移除无用的 shell 脚本资源
  5. 降低 helper 脚本权限
  6. sudoer 配置改为单独的 /etc/sudoer.d/iconchanger 文件
  7. sudoer 配置检验 helper 摘要
  8. 更改安装脚本使其移除旧的 ~/.iconchanger 文件和 sudoer 规则

closes #11

完全磁盘访问权限

移除了权限请求,因为更改图标使用 sudo,而 LaunchPad 数据库似乎是默认 owner 可写的,如果有错误再修改

closes #24

杂项

移除了一个 swift playground

@ghostflyby ghostflyby changed the title remove wrongly committed file improve helper security and install location Mar 18, 2023
@underthestars-zhy
Copy link
Owner

I will look on it. But I am currently changing the shell file to the privilege helper, so it can be more safer.

@ghostflyby
Copy link
Author

ghostflyby commented Mar 18, 2023 via email

@underthestars-zhy
Copy link
Owner

I thought some part maybe still helpful. Like remove the full disk permission.

@ghostflyby
Copy link
Author

replaced by #34

@ghostflyby ghostflyby closed this Mar 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

macOS 12.6.2 打开一直请求完全磁盘访问 能否更改 helper 的安装方式
2 participants