Changes between Version 63 and Version 64 of Mac OS X build instructions

Timestamp:

Aug 31, 2011 2:31:16 PM (13 years ago)

Author:

Christian Pötzsch

Comment:

Hardening builds

Mac OS X build instructions

@@ -3 +3 @@
 == Prerequisites on Mac OS X ==
 
- * Mac OS X 10.4.x (Tiger), 10.5.x (Leopard) or 10.6.x (Snow Leopard) running on Intel hardware (PowerPC hardware is '''not''' supported). Please note that Tiger support was dropped with the 3.1 release.
+ * Mac OS X 10.4.x (Tiger), 10.5.x (Leopard), 10.6.x (Snow Leopard) or 10.7 (Lion) running on Intel hardware (PowerPC hardware is '''not''' supported). Please note that Tiger support was dropped with the 3.1 release.
 
  * Xcode matching your Mac OS X version (http://developer.apple.com/tools/download/): 
@@ -78 +78 @@
  2. Enter {{{out/darwin.x86/release/dist/VirtualBox.app/Contents/MacOS/}}}.
  3. Run {{{./VirtualBox}}}
+
+== Building and using hardening builds ==
+
+For any distribution builds hardening should be enabled for security reasons. Hardening needs some additional configuration and post-build steps. The default install directory of !VirtualBox is `/Applications/VirtualBox.app/`. If you like to change that, say into `/Applications/OpenSource/VirtualBox.app/`, you need to add the following to the `LocalConfig.kmk`:
+{{{
+VBOX_PATH_APP_PRIVATE      = "/Applications/OpenSource/VirtualBox.app/Contents/MacOS"
+VBOX_PATH_APP_PRIVATE_ARCH = "/Applications/OpenSource/VirtualBox.app/Contents/MacOS"
+VBOX_PATH_SHARED_LIBS      = "/Applications/OpenSource/VirtualBox.app/Contents/MacOS"
+VBOX_PATH_APP_DOCS         = "/Applications/OpenSource/VirtualBox.app/Contents/MacOS"
+}}}
+Next rebuild !VirtualBox and install it into `/Applications/OpenSource/`. Now make sure that the setuid stubs have the correct permissions: 
+{{{
+sudo chown -R root:admin /Applications/OpenSource/VirtualBox.app/
+sudo chmod u+s /Applications/OpenSource/VirtualBox.app/Contents/MacOS/VirtualBox
+sudo chmod u+s /Applications/OpenSource/VirtualBox.app/Contents/MacOS/VirtualBoxVM
+sudo chmod u+s /Applications/OpenSource/VirtualBox.app/Contents/MacOS/VBoxHeadless
+sudo chmod u+s /Applications/OpenSource/VirtualBox.app/Contents/MacOS/VBoxNetAdpCtl
+sudo chmod u+s /Applications/OpenSource/VirtualBox.app/Contents/MacOS/VBoxNetDHCP
+}}}
+Another requirement of hardening is that every path component of the parent directory of `VirtualBox.app/` is owned by `root` and not `world` writable. Make sure this is the case.