fix: make macOS config seed world-readable

[madhavilosetty-intel]

No description provided.

[Copilot]

Pull request overview

Updates the macOS installer/uninstaller scripts to relocate the machine-wide configuration seed into /Library/Application Support/device-management-toolkit and adjust permissions so multiple users’ tray instances can read the same seed config.

Changes:

• Move macOS config seed path from $APP_DIR/config/config.yml to /Library/Application Support/device-management-toolkit/config.yml.
• Make the machine-wide config seed world-readable (chmod 644) and adjust related installer/uninstaller messaging.
• Enhance configure.sh to overwrite/update the per-user tray config after reconfiguration.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 8 comments.

File	Description
installers/macos/uninstall.sh	Updates config path references and uninstall messaging to the new machine-wide config directory.
installers/macos/scripts/preinstall	Reads the installed-version fallback from the new machine-wide config location.
installers/macos/scripts/postinstall	Writes/uses the new machine-wide config location and changes config permissions to be readable by non-root users.
installers/macos/configure.sh	Writes config to the new machine-wide location and adds logic to overwrite the per-user tray config on reconfigure.

Comments suppressed due to low confidence (1)

installers/macos/scripts/postinstall:45

• CONFIG_DIR is created with chmod 755, but ownership isn’t enforced. If the directory already exists and is owned/writable by a non-root user, that user could potentially replace config.yml (or swap it with a symlink) before/after installs. It’s safer to ensure the directory is root-owned as well.

# Per-user DB lives in ~/Library/Application Support via os.UserConfigDir(); this
# is the machine-wide seed dir the binary reads (machineConfigPath).
if [ ! -d "$CONFIG_DIR" ]; then
    mkdir -p "$CONFIG_DIR"
    chmod 755 "$CONFIG_DIR"
fi

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.