Path: csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: Jolly Roger <jollyroger@pobox.com>
Newsgroups: comp.sys.mac.system
Subject: Re: System integrity protection
Date: 30 Sep 2015 16:27:08 GMT
Organization: People for the Ethical Treatment of Pirates
Lines: 37
Message-ID: <d72gqsF21kpU3@mid.individual.net>
References: <560b4f4b$0$48988$c3e8da3$92d0a893@news.astraweb.com>
X-Trace: individual.net PvyIxkBeH2jG7k6p2Ss8pAtpvhX9LICLrANJGSD9VOjux9crhe
Cancel-Lock: sha1:28CQHFAkEFksOMluHi/8FilFcSs=
X-Face: _.g>n!a$f3/H3jA]>9pN55*5<`}Tud57>1<n@LQ!aZ7vLO_nWbK~@T'XIS0,oAJcU.qLM dk/j8Udo?O"o9B9Jyx+ez2:B<nx(k3EdHnTvB]'eoVaR495,Rv~/vPa[e^JI+^h5Zk*i`Q;ezqDW< ZFs6kmAJWZjOH\8[$$7jm,Ogw3C_%QM'|H6nygNGhhl+@}n30Nz(^vWo@h>Y%b|b-Y~()~\t,LZ3e up1/bO{=-)
User-Agent: slrn/1.0.1 (Darwin)
Xref: csiph.com comp.sys.mac.system:81189

On 2015-09-30, JF Mezei <jfmezei.spamnot@vaxination.ca> wrote:
>
> Note that /usr/share (to be protected) contains a fair amount of public
> domain software like bison, cups, emacs, freeradius, ftpd, groff, java,
> mailman, man, squirrelmail and others.

Only in default installations that have not been tuned for El Capitan.

> So if you want to patch/upgrade any of those, you need to turn off SIP,
>
> install the new version in /usr/local and delete the ones in /usr/share.
> The man directories can be an issue. By default, apple also puts in the
> path: MANPATH /usr/local/share/man whichg remains accessible after SIP,
> it is just a question of ensuring software that installs puts its man
> pages there.

Not necessarily. Many packages will likely be modified to avoid
/usr/share on Darwin for El Capitan. And for those that do not, it's
simple enough to specify an alternate location when compiling them. It's
not as big a deal as you make it out to be.

> It is good for Apple to specify where optional sofwtare should go. But a
> bit radical to introduce this so quickly and abruptly.

Nonsense. They've given plenty of notice.

> Apple should make an app that you can run prior to installing El Capitan
> which will report on how "compatible" your system is and which files
> will be deleted or moved out of Apple's newly protected directories.

You'll know which items have been moved after installation.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR