On Mon, 21 Dec 2009 22:21:47 -0800 (PST)
Andy2k8 <appr...@gmail.com> wrote:

> 
> If anybody can use the orca tool to edit a shipped MSI package, are
> we not compromising on the security of the installer database? Or is
> there any way i can make my MSI read only?

You can sign MSI files using an Authenticode signature: if someone
modifies the database after it has been signed then the signature will
be marked as invalid and any user attempting to run/open it will be
warned that it has been changed.

-- 
Bruce Cran

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to