You can try setting the packa...@readonly attribute. As far as I know Orca
respects the read-only selection but I have never tried it myself. However,
the APIs don't seem to prohibit editing (and committing) "read-only" MSI
files.

If your MSI file is authenticode-signed than any editing at all will cause
the signature to "disappear". If you have some means of testing the
signature and/or can educate the user about verifying the signature in the
UAC prompts that may provide you with your solution...

-----Original Message-----
From: Andy2k8 [mailto:appr...@gmail.com] 
Sent: Monday, December 21, 2009 10:22 PM
To: wix-users@lists.sourceforge.net
Subject: [WiX-users] Clarification on the MSI security


If anybody can use the orca tool to edit a shipped MSI package, are we not
compromising on the security of the installer database? Or is there any way
i can make my MSI read only?

-----
Andy
MSI Developer
Schneider Electric:working:
-- 
View this message in context:
http://n2.nabble.com/Clarification-on-the-MSI-security-tp4202247p4202247.htm
l
Sent from the wix-users mailing list archive at Nabble.com.

----------------------------------------------------------------------------
--
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users


------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to