> On 10 Mar 2018, at 09:42, Michael Tuexen <michael.tuexen@xxxxxxxxxxxxxxxxx> wrote:
>
>> On 10. Mar 2018, at 06:16, Jaap Keuter <jaap.keuter@xxxxxxxxx> wrote:
>>
>> Hi List,
>>
>> While digging into https://ask.wireshark.org/question/2023 I stumbled up these entries in my file system
>>
>> macOS:~ jaap$ cd /Library/Application\ Support/
>> macOS:Application Support jaap$ ls -la
>> total 0
>> ...
>> drwxr-xr-x 3 root wheel 102 Jul 31 2016 Script Editor
>> drwxrwx--- 2 root admin 68 Jun 18 2015 SubmitDiagInfo
>> drwxr-xr-x 7 root wheel 238 Nov 17 17:06 VirtualBox
>> drwx------ 3 504 wheel 102 Nov 23 2015 Wireshark
>> drwx------ 3 root admin 102 Jan 25 22:48 com.apple.TCC
>> drwxr-xr-x 3 root wheel 102 Jul 31 2016 iLifeMediaBrowser
>>
>>
>> macOS:Application Support jaap$ sudo ls -la Wireshark/ChmodBPF
>> total 16
>> drwxrwxr-x 4 504 staff 136 Oct 18 16:47 .
>> drwx------ 3 504 wheel 102 Nov 23 2015 ..
>> -rwxrwxr-x 1 504 staff 1431 Oct 10 20:17 ChmodBPF
>> -rw-rw-r-- 1 504 staff 382 Oct 10 20:17 org.wireshark.ChmodBPF.plist
>>
>> They question is, why the user 504 on these files? Shouldn’t those be root owned?
> 504 is the uid of the user doing the build on the Max OS buildbot...
>
Well, obviously, but that isn’t the real question of course.
'Shouldn’t those be root owned?’ is the real one.
> Best regards
> Michael
>>
>> Is that an left over from an old installer, or is this still happening with the current?
>>
>> Thanks,
>> Jaap
>>
>>