https://bugs.documentfoundation.org/show_bug.cgi?id=101719

V Stuart Foote <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |NOTOURBUG

--- Comment #12 from V Stuart Foote <[email protected]> ---
OK, so spent some time with this. I also am not convinced the issue is
LibreOffice's installer. This appears to be common with the CS/CC suite
installs and points to an Adobe installer issues [1].

I've only got CS5 to work with, and as Adobe did not use .MSI packaging--so can
not open the installer with ORCA to review what would be laid down as
permissions for
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths stanzas

However, not just Photoshop, but Adobe Flash Catalyst, Dreamweaver and
Fireworks all are assigned the EVERYONE => Read Only settings (it is not
inherited).  While Acrbat, Bridge, Flash, Illustrator, and InDesign all have
more reasonable User => Read Only and Administrators => Full Control.

Technically the EVERYBODY is not wrong--but also not correct--looks like Adobe
screwed that up. 

Otherwise having to enable EVERYONE => Full Control is flat out a security
flaw. I doubt that state was left by the Adobe installer.

The correct way to fix this is to open the KEY, set Permissions--and change
Owner to Administrators (select replace child object permissions) _AND_
deleting the EVERYONE entry.

Absent an actual installation log of Creative Suite/Creative Cloud showing the
permissions set, and a log of LibreOffice actually touching those KEYs in
registry comfortable closing NOTOURBUG

=-ref-=
[1] https://forums.adobe.com/thread/2193296

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to