Re: [WiX-users] Clarification on the MSI security

2009-12-29 Thread Blair
You can try setting the packa...@readonly attribute. As far as I know Orca respects the read-only selection but I have never tried it myself. However, the APIs don't seem to prohibit editing (and committing) "read-only" MSI files. If your MSI file is authenticode-signed than any editing at all wil

Re: [WiX-users] Clarification on the MSI security

2009-12-22 Thread Bruce Cran
On Mon, 21 Dec 2009 22:21:47 -0800 (PST) Andy2k8 wrote: > > If anybody can use the orca tool to edit a shipped MSI package, are > we not compromising on the security of the installer database? Or is > there any way i can make my MSI read only? You can sign MSI files using an Authenticode signat