• SEARCH
  • DOWNLOADS
  • MY ACCOUNT
  • Buy (0)
  • CONTACT
  • Free Trial
Wowza Logo
  • PRODUCTS
    • Products

      • Wowza ClearCaster
      • Facebook Live appliance
      • Wowza Streaming Cloud
      • Cloud streaming services
      • Wowza Streaming Engine
      • Streaming server software
      • Wowza GoCoder & SDK
      • Mobile capture and encoding app
    • Capabilities

      • CDN
      • Ultra Low Latency
      • SRT
      • Player
      • WebRTC
      • Live Transcoding
      • See All Capabilities
  • DOCS & APIS

      Docs & APIs

      • Getting Started
      • User Guides
      • Technical Articles
      • Video Tutorials
      • API & SDK Docs
  • SOLUTIONS
    • Streaming Types

      • Live Video Streaming
      • Video on Demand
      • Audio-Only Streaming
      • IP Camera Streaming
      • VR and 360° Streaming
      • Chat
    • Industries

      • Broadcast & OTT
      • Education
      • Enterprise
      • Government
      • Live Events
      • Live Sports
      • Religious Organizations
    • Streaming Solutions

      • MediaDS—Integrated Streaming Device
      • Streaming Service Providers
      • Live Mobile Broadcasting
  • PRICING
    • Wowza ClearCaster

      • Facebook Live appliance
      • Starting at $2,995
      • Add to Cart
      • Request a Demo
    • Wowza Streaming Cloud

      • Cloud streaming services
      • Starter Plan: $49/month
      • Add to Cart
      • See All Plans
    • Wowza Streaming Engine

      • Streaming server software
      • Annual Plan: $65/month
      • Add to Cart
      • See All Plans
    • Wowza GoCoder SDK

      • SDK for mobile streaming
      • Talk to a Streaming Expert
      • Contact Us
      • Free Trial
  • RESOURCES

      Resources

      • Blog
      • Case Studies
      • Webinars
      • Videos
      • Podcasts
      • Test Players
      • Developer Tools
  • SUPPORT
    • Support

      • Forums
      • Software Updates
      • Open a Support Ticket
    • Plans & Services

      • Support Plans
      • Advisory Services
      • Live Event Support
  • My Account
  • Buy (0)
  • SEARCH
  • Ask a question
  • Forums
    • Wowza ClearCaster
    • Wowza Streaming Engine
    • Wowza Streaming Cloud
    • Wowza Player
    • Wowza GoCoder SDK
    • Wowza Developer Dojo
    • Topics
    • Questions
    • Users
    • Badges
  • Sign in
  • Community Home /
  • Wowza Streaming Engine /
  • Server Administration /
avatar image
Question by Richard Glaser · Jun 10, 2015 at 01:25 PM · server administration

OS X Installer Insecure Permissions

Hello:

I just installed the Wowza Streaming Engine 4.1.2 OS X using the installer and installs many files/directories with other write permissions.

Is there a reason why? Or was this overlooked when building the installer? Does others really need write access? What permissions should be used?

For example, pretty much every directory and file installed in "Library/WowzaStreamingEngine-4.1.2"...

% ls -al /Library/WowzaStreamingEngine-4.1.2

total 0

drwxrwxrwx 16 root wheel 544 Jun 10 13:34 .

drwxr-xr-x+ 65 root wheel 2210 Jun 10 13:34 ..

drwxrwxrwx 4 root wheel 136 Jun 10 13:34 applications

drwxrwxrwx 2 root wheel 68 Jun 10 13:34 backup

drwxrwxrwx 16 root wheel 544 Jun 10 13:34 bin

drwxrwxrwx 20 root wheel 680 Jun 10 14:22 conf

drwxrwxrwx 4 root wheel 136 Jun 10 13:34 content

drwxrwxrwx 7 root wheel 238 Jun 10 13:34 documentation

drwxrwxrwx 11 root wheel 374 Jun 10 13:34 examples

drwxrwxrwx 2 root wheel 68 Jun 10 13:34 keys

drwxrwxrwx 5 root wheel 170 Jun 10 13:34 legal

drwxrwxrwx 47 root wheel 1598 Jun 10 13:34 lib

drwxrwxrwx 6 root wheel 204 Jun 10 14:26 logs

drwxrwxrwx 6 root wheel 204 Jun 10 13:34 manager

drwxrwxrwx 2 root wheel 68 Jun 10 13:34 mediacache

drwxrwxrwx 2 root wheel 68 Jun 10 13:34 updates
Comment

People who like this

0 Show 0
10 |600 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users

1 Reply

· Add your reply
  • Sort: 
avatar image

Answer by Paul Shields · Jun 12, 2015 at 02:37 PM

Hi,

Wowza generally installs with enough permissions in order to work without the user having to worry too much about permissions. So it can be seen as quite generous on some platforms, as in OS X - which is generally similar to a desktop installation. For example, if installed and run as stand-alone mode then Wowza is running as the user logged into OS X at that time, so long as that user also has admin/root privileges.

You can lock this down manually to your specific administrator user, for example user "paul" in group "staff" (stop Wowza first)

cd /Library
chmod -R 700 WowzaStreamingEngine-X.X.X
chown -R paul:admin WowzaStreamingEngine-X.X.X


That would prevent anyone apart from "paul" (or root of course) from cd'ing into the Wowza installation path.

Paul
Comment

People who like this

0 Show 1 · Share
10 |600 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users
avatar image Richard Glaser · Jun 23, 2015 at 03:45 PM 0
Share
Apple has guidelines on best practices on software install on OS X, these permissions on either OS X client or server don't follow there guidelines.

https://developer.apple.com/library/mac/documentation/Security/Conceptual/SecureCodingGuide/SecurityDevelopmentChecklists/SecurityDevelopmentChecklists.html

Everyone should not have write access to /Library or sub-directories. I would recommend that the installer is fixed to use proper permissions in future releases.

Your answer

Hint: You can notify a user about this post by typing @username

Up to 2 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

Follow this Question

Answers Answers and Comments

1 Person is following this question.

avatar image

Related Questions

Quick JConsole overview 1 Answer

Database logging 3 Answers

Is it possible to disable UDP streaming 7 Answers

Block connections in the origin with simple tv 1 Answer

Edge Servers Error with LB 4 3 Answers

Hot Topics
  • AWS Hosting
  • Mobile SDK
  • Deployment Options
  • Load Balancing
  • Content Security
Product Sign-in
  • Wowza Streaming Cloud
  • Wowza Player
Under the Hood
  • Developer Tools
  • Wowza System Status
  • Test Players
  • Developer IDE
Resellers
  • Find a Reseller
  • Reseller Portal
  • Become a Reseller
Company
  • About Us
  • Blog
  • News
  • Events
  • Careers
  • Customers
  • Partners
  • Contact Us
Stay Connected
Get Monthly Newsletter
Select a Language
  • English
    • English
    • Español
    • 日本語
    • 한국어
    • हिन्दी भाषा
    • 中文
    • русский язык

© 2005–2018 Wowza Media Systems, LLC. All rights reserved.   Terms | Privacy | Trademarks | Legal


Enterprise
Social Q&A

  • Anonymous
  • Sign in
  • Create
  • Ask a question
  • Create an article
  • Forums
  • Wowza ClearCaster
  • Wowza Streaming Engine
  • Wowza Streaming Cloud
  • Wowza Player
  • Wowza GoCoder SDK
  • Wowza Developer Dojo
  • Explore
  • Topics
  • Questions
  • Users
  • Badges