Bug: some configurations don't stick between logins

[kristovatlas]

I think #29 broke some config fixes; By not running as sudo by default, we temporarily change the defaults value but it doesn't persist.

I've noticed this with the application firewall and stealth mode.

[kristovatlas]

The most sensible solution perhaps is to do the following:

• Allow for configs in the HJson file to omit fix and only supply sudo_fix OR to specify a version of the fix that only applies to the current user. For example, I bet it will stick if we write to ~/Library/... rather than /Library/... without sudo. These config objects would include a sudo_fix and a current_user_fix as a fallback to the sudo_fix failing due to lack of sudoers privs.
• Note these standards at the top of the HJson in comments.

As I'm considering additional kinds of fixes, it might make sense to turn this into a fixes array with various kinds and allow the HJson author to specify the order in which he wants them attempted, perhaps with individual test conditions.

[kristovatlas]

After some experimentation, I don't think the problem is whether the configuration fix command is run as sudo; it seems that some configuration states are overwritten by the operating system when written to /Library/Preferences/ rather than ~/Library/Preferences/. Probably the safest thing to do for now is to double up on the commands for which this is observed, and consider phasing out the /Library/Preferences/ version of the command eventually if it proves useless.

This emphasizes the importance of running the app one per user.

[kristovatlas]

This doesn't seem to stick over time:

A password is required to wake the computer from sleep or screen saver (system-wide)

This is accomplished with the sudo defaults write /Library/Preferences/com.apple.screensaver askForPassword -bool true command.

[kristovatlas]

This command doesn't stick over time:
sudo defaults -currentHost write /Library/Preferences/com.apple.alf allowsignedenabled -bool false

But the current-user-only version does.
defaults -currentHost write ~/Library/Preferences/com.apple.alf allowsignedenabled -bool false