Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.sys.mac.system > #81189

Re: System integrity protection

From Jolly Roger <jollyroger@pobox.com>
Newsgroups comp.sys.mac.system
Subject Re: System integrity protection
Date 2015-09-30 16:27 +0000
Organization People for the Ethical Treatment of Pirates
Message-ID <d72gqsF21kpU3@mid.individual.net> (permalink)
References <560b4f4b$0$48988$c3e8da3$92d0a893@news.astraweb.com>

Show all headers | View raw


On 2015-09-30, JF Mezei <jfmezei.spamnot@vaxination.ca> wrote:
>
> Note that /usr/share (to be protected) contains a fair amount of public
> domain software like bison, cups, emacs, freeradius, ftpd, groff, java,
> mailman, man, squirrelmail and others.

Only in default installations that have not been tuned for El Capitan.

> So if you want to patch/upgrade any of those, you need to turn off SIP,
>
> install the new version in /usr/local and delete the ones in /usr/share.
> The man directories can be an issue. By default, apple also puts in the
> path: MANPATH /usr/local/share/man whichg remains accessible after SIP,
> it is just a question of ensuring software that installs puts its man
> pages there.

Not necessarily. Many packages will likely be modified to avoid
/usr/share on Darwin for El Capitan. And for those that do not, it's
simple enough to specify an alternate location when compiling them. It's
not as big a deal as you make it out to be.

> It is good for Apple to specify where optional sofwtare should go. But a
> bit radical to introduce this so quickly and abruptly.

Nonsense. They've given plenty of notice.

> Apple should make an app that you can run prior to installing El Capitan
> which will report on how "compatible" your system is and which files
> will be deleted or moved out of Apple's newly protected directories.

You'll know which items have been moved after installation.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

Back to comp.sys.mac.system | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

System integrity protection JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-09-29 22:56 -0400
  Re: System integrity protection JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-09-29 23:58 -0400
    Re: System integrity protection JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-09-30 00:02 -0400
  Re: System integrity protection Jolly Roger <jollyroger@pobox.com> - 2015-09-30 16:27 +0000
    Re: System integrity protection JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-09-30 12:50 -0400
      Re: System integrity protection Jolly Roger <jollyroger@pobox.com> - 2015-09-30 16:54 +0000
  Re: System integrity protection Fred Moore <fmoore@gcfn.org> - 2015-09-30 16:49 -0400
    Re: System integrity protection JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-09-30 21:24 -0400

csiph-web