{"id":44,"date":"2008-03-12T14:19:27","date_gmt":"2008-03-12T21:19:27","guid":{"rendered":"http:\/\/www.brunerd.com\/blog\/2008\/03\/12\/office-2008-1201-update-almost-does-it\/"},"modified":"2008-03-13T07:56:40","modified_gmt":"2008-03-13T14:56:40","slug":"office-2008-1201-update-almost-does-it","status":"publish","type":"post","link":"https:\/\/www.brunerd.com\/blog\/2008\/03\/12\/office-2008-1201-update-almost-does-it\/","title":{"rendered":"Office 2008 12.01 Update almost does it"},"content":{"rendered":"<p>So the <a href=\"http:\/\/www.microsoft.com\/mac\/downloads.mspx\">Office 2008 12.01 updater<\/a> came out, it&#8217;s got a whole lot of packages for each app and component with postflight scripts written in Python to clean up all the permissions: <\/p>\n<blockquote><p>Mar 12 15:33:00 brunerd runner[8556]: postflight[8773]: setting ownership\/permissions<br \/>\nMar 12 15:33:00 brunerd runner[8556]: postflight[8773]: fixing setuid flags<br \/>\nMar 12 15:33:00 brunerd runner[8556]: postflight[8773]: clearing ACLs<br \/>\nMar 12 15:33:00 brunerd runner[8556]: postflight[8773]: sanitizing receipts\n<\/p><\/blockquote>\n<p>Doing an ls -lRFG in \/Applications\/Microsoft Office 2008 won&#8217;t leave you <a href=\"http:\/\/www.brunerd.com\/blog\/2008\/01\/21\/office-2008-for-the-executive\/\">seeing red<\/a>, they&#8217;ve cleaned that all up quite nicely. <\/p>\n<p>Anyway, call me picky, but it forgets just one thing, the <strong>\/Library\/Fonts\/Microsoft<\/strong> folder, it leaves that and its contents owned by 502 and they&#8217;re all marked executable. (Fonts don&#8217;t really need to be executable.) And as paranoid as it is &#8212; it&#8217;s still not quite right. So after you&#8217;ve put your tinfoil hat on, run 12.01,  you can do this to finish it up:<\/p>\n<p>#take away all users&#8217; execute permissions<br \/>\nchmod a-x \/Library\/Fonts\/Microsoft\/*<br \/>\n#recursively own all fonts as root and admin group<br \/>\nsudo chown -R root:admin \/Library\/Fonts\/Microsoft<\/p>\n<p>Update: Or you can go into the update using Show Package Contents then navigate to <strong>Contents\/Packages<\/strong> and run <strong>Office2008_en_fonts_12.0.1.incremental.pkg<\/strong> again, that&#8217;ll do the trick.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>So the Office 2008 12.01 updater came out, it&#8217;s got a whole lot of packages for each app and component with postflight scripts written in Python to clean up all the permissions: Mar 12 15:33:00 brunerd runner[8556]: postflight[8773]: setting ownership\/permissions Mar 12 15:33:00 brunerd runner[8556]: postflight[8773]: fixing setuid flags Mar 12 15:33:00 brunerd runner[8556]: postflight[8773]: [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7,8],"tags":[],"class_list":["post-44","post","type-post","status-publish","format-standard","hentry","category-microsoft","category-security"],"_links":{"self":[{"href":"https:\/\/www.brunerd.com\/blog\/wp-json\/wp\/v2\/posts\/44","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.brunerd.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.brunerd.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.brunerd.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.brunerd.com\/blog\/wp-json\/wp\/v2\/comments?post=44"}],"version-history":[{"count":0,"href":"https:\/\/www.brunerd.com\/blog\/wp-json\/wp\/v2\/posts\/44\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.brunerd.com\/blog\/wp-json\/wp\/v2\/media?parent=44"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.brunerd.com\/blog\/wp-json\/wp\/v2\/categories?post=44"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.brunerd.com\/blog\/wp-json\/wp\/v2\/tags?post=44"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}