[SCAP-On-Apple] [SCAP-On-Apple-Dev] Mac OS X proposed pkginfo OVAL Test.
Jacobsen, Jasen W.
jasenj1 at mitre.org
Fri Jul 12 09:09:48 PDT 2013
Excellent. Do you know if /Partition2 has its own Installer receipt DB? Or is the boot volume's DB being used (/var/db/receipts on 10.8)? i.e. Is the receipt for the application installed on Partition2 on the boot volume or the destination volume?
The below implies that OVAL would need to know all the volumes available and then check each one.
From: Shane Shaffer <shane.shaffer at g2-inc.com<mailto:shane.shaffer at g2-inc.com>>
Date: Friday, July 12, 2013 10:34 AM
To: MITRE Employee <jasenj1 at mitre.org<mailto:jasenj1 at mitre.org>>
Cc: "scap-on-apple-dev at lists.macosforge.org<mailto:scap-on-apple-dev at lists.macosforge.org>" <scap-on-apple-dev at lists.macosforge.org<mailto:scap-on-apple-dev at lists.macosforge.org>>, "scap-on-apple at lists.macosforge.org<mailto:scap-on-apple at lists.macosforge.org>" <scap-on-apple at lists.macosforge.org<mailto:scap-on-apple at lists.macosforge.org>>, oval-developer-list OVAL Developer List/Closed Public Discussion <oval-developer-list at lists.mitre.org<mailto:oval-developer-list at lists.mitre.org>>
Subject: Re: [SCAP-On-Apple-Dev] [SCAP-On-Apple] Mac OS X proposed pkginfo OVAL Test.
I have a system with two volumes, the boot volume and one named Partition2. I installed an application on Partition2. If I run "pkgutil --pkgs" that package is not listed. If I run "pkgutil --pkgs --volume /Volumes/Partition2" then it is listed. So it appears that querying the receipt database is volume specific. If I subsequently install the same application on the root volume, then it shows up as you'd expect via "pkgutil --pkgs" and there appears to be no link between the two installs. I would think that just checking the boot volume would be akin to just checking C:\Program Files on Windows - overwhelming probability of being the location, but not good enough.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the SCAP-On-Apple