Opened 8 years ago

Closed 5 years ago

#4894 closed defect (duplicate)

TBB permissions problem in multi-user OS X environment

Reported by: h8a14i20QH Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Keywords: permissions, needs-triage
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Installing a centrally-accessible copy of TBB on OS X results in only the installing user being able to launch the bundle, owing to a permissions issue:

[Warning] ../../Contents/Resources/Data/Tor is not owned by this user (REDACTED, REDACTED) but by REDACTED (REDACTED). Perhaps you are running Tor as the wrong user?
[Warning] Failed to parse/validate config: Couldn't access/create private data directory "../../Contents/Resources/Data/Tor"
[Error] Reading config failed--see warnings above.

If possible, TBB should be re-made in such a fashion that it can be installed on OS X by one user, yet used successfully by others, without having to manually undertake a permissions-workaround.

Problem encountered with TBB Version 2.2.35-4 - OS X (64-Bit) on OS X 10.6.8.

Child Tickets

Change History (7)

comment:1 Changed 8 years ago by mikeperry

Component: Tor BrowserTor bundles/installation
Owner: changed from mikeperry to erinn

The bundle is meant to be self-contained, such that if you securely delete it, it's really gone.

This property is hard to maintain if we support multi-user, unless we make the data dir world-writable.. I'm not sure that is the solution either, because then we'd have other users complaining about how their computer's Guest accounts can modify/delete the TBB...

comment:2 Changed 5 years ago by erinn

Keywords: needs-triage added

comment:3 Changed 5 years ago by erinn

Component: Tor bundles/installationTor Browser
Owner: changed from erinn to tbb-team

comment:4 Changed 5 years ago by mcs

Also see #5900.

comment:5 Changed 5 years ago by knoblauch2014

Currently the MacOS installer tries to copy the bundle to the system directory /Applications.

This is inconsistent with the stated aim of a self-contained bundle.

The installer should copy the bundle to the current user Applications directory instead.

Alternatively, perhaps the application could be redesigned so it does not need to update the disk. However that is likely to be time-consuming.

Fixing the installer should be trivial, so could be done now.

If it subsequently proves possible to eliminate the need to update the installed application, then the installer could revert to copying the file to the system /Applications area.

comment:6 in reply to:  5 Changed 5 years ago by gk

Replying to knoblauch2014:

Currently the MacOS installer tries to copy the bundle to the system directory /Applications.

This is inconsistent with the stated aim of a self-contained bundle.

The installer should copy the bundle to the current user Applications directory instead.

This is #12966.

comment:7 Changed 5 years ago by mcs

Resolution: duplicate
Status: newclosed

Because work is being done #14631 to perform a write test during browser startup, and because #12966 covers the idea of encouraging users to copy Tor Browser to ~/Applications instead of /Applications, I am closing this bug as a duplicate.

Note: See TracTickets for help on using tickets.