FAQ is missing explanations for IT Administrators of macOS for user group and file permissions

[sean-freeman]

Description of issue

FAQ is missing explanations for IT Administrators of macOS for user group and file permissions

It can be seen in the installation script, for Linux the current user/group is used whereas for macOS this is forced to admin group (instead of lower default group staff that the user is actually a part of).

Similarly, there is no explanation why 0755 (i.e. ugo+rwx) is required.

The justifications seem obvious, but documentation of the reasons provides evidence for IT Administrators and security policies of businesses.

Searched https://github.com/Homebrew/brew/tree/main/docs

[SMillerDev]

You're welcome to make a pull request for this.

[sean-freeman]

I would, if I knew the inner workings of Homebrew and could:

• describe why admin is necessary, and why staff user group is not sufficient for execution
• describe why 0755 is necessary, when Homebrew only executes as the current user (therefore 0700 should, in theory, be sufficient)

Only raised it because it should be in documentation somewhere, and after a lot of searching I could not find any answer - relying instead on sensible reasoning which doesn't really get you a pass from IT Admins :)

[SMillerDev]

If you make a pull request with the documentation you would like to see and some questions to extend it, I'd expect the maintainers would be happy to help finish it. Even if you'd probably be easier off with workbrew.

[sean-freeman]

I was not aware of Workbrew, that's very cool for future but doesn't apply for my current (individual) scale.

I will take a shot at writing something for the FAQ and PR it.