http://www.officeformac.com/ms/blog <p>You may have seen recent reports on the web of a security issue in the installer for Mac Office 2008. The issue is that our installer is incorrectly granting ownership of the files to a particular local user as it installs them, so that if your Mac actually has a second local user and that user is not an administrator on your Mac, they could modify your Office 2008 install. The issue does not expose the Office 2008 install to modifications by any networked user account or to any local account other than the second one created on your Mac.</p> <p>Microsoft and the MacBU take all security issues seriously, and we intend to fix this situation in several ways. First of all, if you have already installed Office 2008, you can run two commands in the Terminal to fix the file ownership and remove the security concern (see instructions below). Second, the MacBU is working on an update to Office 2008 that will automatically fix the file ownership for you. This update will be made available via Microsoft's AutoUpdate tool and via a web download.</p> <p>If you want to update the file ownership settings yourself, here are the instructions. You must be an administrator on your Mac to do this:</p> <br> <ol> <br> &nbsp;&nbsp;&nbsp;&nbsp;<li>Log in to the computer by using a user account with administrator privileges.</li> <br> &nbsp;&nbsp;&nbsp;&nbsp;<li>In /Applications/Utilities, open Terminal.</li> <br> &nbsp;&nbsp;&nbsp;&nbsp;<li>In the Terminal window, type the following command on one line, and then press RETURN.</li> &nbsp;&nbsp;&nbsp;&nbsp;<pre> /usr/bin/sudo /bin/chmod -R a-st &nbsp;&nbsp;&nbsp;&quot;/Applications/Microsoft Office 2008&quot; &nbsp;&nbsp;&nbsp;&quot;/Library/Automator&quot; &nbsp;&nbsp;&nbsp;&quot;/Library/Fonts/Microsoft&quot; &nbsp;&nbsp;&nbsp;&quot;/Library/Application Support/Microsoft&quot; <br><br><br /></pre> &nbsp;&nbsp;&nbsp;&nbsp;<li>When prompted, enter the password for the user account that you used to log in in step 1.</li> <br> &nbsp;&nbsp;&nbsp;&nbsp;<li>In the Terminal window, type the following command on one line, and then press RETURN.</li> &nbsp;&nbsp;&nbsp;&nbsp;<pre> /usr/bin/sudo /usr/sbin/chown -h -R root:admin &nbsp;&nbsp;&nbsp;&quot;/Applications/Microsoft Office 2008&quot; &nbsp;&nbsp;&nbsp;&quot;/Library/Automator&quot; &nbsp;&nbsp;&nbsp;&quot;/Library/Fonts/Microsoft&quot; &nbsp;&nbsp;&nbsp;&quot;/Library/Application Support/Microsoft&quot; <br><br><br /></pre> &nbsp;&nbsp;&nbsp;&nbsp;<li>If prompted, enter the password for the user account that you used to log in in step 1.</li> <br> </ol> <p>(Updated on January 26 to fix the missing quotes in step 5 -- Schwieb.)</p> Thu, 24 Apr 2008 19:04:51 GMT Web Crossing(r) Unix-v6.4 built Jan 14 2010 18:50:13 (source:1372 2010-01-14 15:39:31 -0800)/Unix-6.4 (http://webcrossing.com/) http://backend.userland.com/rss