Dragging .app files to /Applications without requiring password

Jump to First Reply
javacowboyjavacowboy
Posted:
in macOS edited January 2014
I'm sure I must be naive, but I'm wondering why OS X allows me to drag .app files in the /Applications folder, a system folder, without requiring a password. The only time I'm required to enter a password is when running a proper installer file, like Fink.



Granted, if I try to drag files to other system folders (ex /System/Library), it asks me for my password.



How is this secure? Can somebody explain this to me? I'm not trolling, I'm asking a sincere question that I'd like answered.

Comments

  • Reply 1 of 3
    telomartelomar Posts: 1,804member
    What does it matter if an app is in the applications folder? It does the same thing there as anywhere else so it allowing you to do that really has no influence on security.



    It only requests passwords if it is going to effect a folder that matters.
     0Likes 0Dislikes 0Informatives
  • Reply 2 of 3
    kickahakickaha Posts: 8,760member
    Only the /System folder is a 'system folder' that no one can write to. Everything in there is from Apple, and considered hands off by users.



    Things in /Users are owned by the individual users (except Shared, which is open and read/writable by anyone).



    /Applications and /Library are an open shared space, and are writable by anyone with an admin account.



    Installers ask you for your admin password because they usually install things into /Library, which requires admin access to write to. The Installer does not automatically get admin rights by running in your admin space, you have to authorize it.



    If an application does *not* require installing into Library, it should be distributed by the developer as a drag-and-drop ready to go application that you can drag directly to /Applications, or wherever you want.
     0Likes 0Dislikes 0Informatives
  • Reply 3 of 3
    skenkinskenkin Posts: 28member
    The reason that you are able to drag applications directly into the Applications folder is that your user is a member of the "admin" group.



    This is why it is recommended that your regular user account does not have admin privileges, and you only use the account with admin privs when necessary.



    The majority of us, including myself, find it a bit annoying or paranoid to be typing in your username and password for every little thing so our normal user account usually is a member of the admin group.



    The reason that the installer always asks for a password is that it can be run surreptitiously, hence the need for the user to be warned that an installation is in progress.



    This is the main difference between installations on OSX and Wndows, and what protects us from inadvertently installing adware, spyware etc.



    Cheers.
     0Likes 0Dislikes 0Informatives
Sign In or Register to comment.