Questions tagged [osx-gatekeeper]

Gatekeeper is a new feature in OS X Mountain Lion that helps protect users from downloading and installing malicious software. Signing your applications, plug-ins, and installer packages with a Developer ID certificate lets Gatekeeper verify that they are not known malware and have not been tampered with.

Gatekeeper makes it safer to download apps by protecting you from inadvertently installing malicious software on your Mac. The safest place to download apps for your Mac is the Mac App Store. Apple reviews each app before it’s accepted by the store, and if there’s ever a problem with an app, Apple can quickly remove it from the store. When you download software from any other place on the Internet, Gatekeeper makes that safer, too. Developers can get a unique Developer ID from Apple and use it to digitally sign their apps. The Developer ID allows Gatekeeper to block apps created by malware developers and to verify that apps haven’t been tampered with. If an app was developed by an unknown developer — one with no Developer ID — Gatekeeper can keep your Mac safe by blocking the app from being installed.

126 questions
1
vote
1 answer

Using existing CA-issued cert to sign OS X application and keep Gatekeeper happy

I build an OSX app which is distributed as a DMG outside of the Mac App Store, and I'd like to continue to have it be that way once Gatekeeper enforcement begins. From studying code signing documentation, it looks like the recommended approach is to…
psychotik
  • 38,153
  • 34
  • 100
  • 135
0
votes
1 answer

MacOS Ventura: Unable to replace application bundle in /Applications

I am trying to replace an application bundle at /Applications/example.app with an updated version of the same bundle on OSX Ventura and I get Operation not permitted. Both bundles are signed and notarized with the same identity. Inside both…
fionbio
  • 3,368
  • 2
  • 23
  • 38
0
votes
0 answers

Crontab not executing after code-signing in Mac

I create cronJob in my mac application using apple script. It was working fine until codeSigning the application. I had to code sign the application to keep away from gateKeepers. Each time i update the cron there was a gatekeeper popup. To remove…
0
votes
1 answer

Mac app cannot run due to gatekeeper block jna*.tmp file generated at launch time

My app has already been signed and notarized successfully, but I got this error while trying to launch the app: "jna7223640233751603426.tmp" cannot be opened because the developer cannot be verified Does anybody have the solution for this? How…
0
votes
2 answers

Notarizing Mac App in bamboo with install4j9

I have recently updated from install4j6 -> install4j9, which I use within in my build server in bamboo. Bamboo has no issues code signing the files but the notarization process in never ran. I have no issues doing this manually on my Mac, but within…
0
votes
1 answer

Permission denied GateKeeper warnings in the terminal when running macOS CLI tool even after signing and notarizing

I've been trying to get my CLI tool running without any GateKeeper UI's showing up, which makes the experience more annoying for users.
Ben Butterworth
  • 22,056
  • 10
  • 114
  • 167
0
votes
1 answer

How to trigger GateKeeper quarantine without uploading/ downloading the file/ installer?

I made a pkg installer and I'm trying to debug the codesigning issue where GateKeeper has put the quarantine flag on the installer. This quarantine translates to the permission denied when the application through the CLI, or when double clicking, or…
Ben Butterworth
  • 22,056
  • 10
  • 114
  • 167
0
votes
1 answer

Why would Gatekeeper ignore an unsigned application bundle?

I am helping a client package a legacy Adobe AIR application as a standalone application. The AIR compiler outputs a .app application bundle. After compiling an unsigned application bundle, I figured I might as well try sending it to the client to…
Kevin
  • 269
  • 3
  • 13
0
votes
1 answer

Gatekeeper fatal problems when building on macOS Big sur

I have serious problems with the "security" stuff. First, there is an installer package (PKG). Works without problems on all (most?) macOS with catalina and newer (probably). But trying it on 10.11 and older results in macOS saying that it is…
mrzacek mrzacek
  • 308
  • 2
  • 12
0
votes
1 answer

Xamarin.Mac application hang when interacting with filesystem for end-users

I'm working on an internal company desktop app that gets distributed via an internal intranet site. The app is written in C# using Xamarin.Mac and Visual Studio for Mac and works fine locally until I compress the *.app file and upload it to the…
Ash_H
  • 11
  • 2
0
votes
0 answers

How would I implement a Gatekeeper bypass in my Swift 5 macOS app?

My app requires sudo xattr -rd com.apple.quarantine (app directory here) to be run in order for it to boot up on my tester's Mac. Is there a way to implement this into the app so that the command isn't needed? I have to reach into the Downloads…
ModernEra
  • 33
  • 4
0
votes
0 answers

Not possible to fully disable gatekeeper

I only get my apps from brew or Mac app store. Every time a cask is updated I am met with 'Application' is downloaded from the internet open warning. I have tried disabling gatekeeper sudo spctl --master-disable and turning off quarantine defaults…
MANICX100
  • 1,299
  • 2
  • 12
  • 20
0
votes
1 answer

MacOS MySQL Gone Away and local networking issues due to GateKeeper

On MacOS Mojave 10.14.5, local services relying on TCP connections have connections randomly aborted, resulting in errors like "Mysql has gone away" and Nginx connection resets. Seems like the Mojave OS is monitoring and blocking TCP connections,…
Dmitri Sologoubenko
  • 2,909
  • 1
  • 23
  • 27
0
votes
1 answer

Kernel extensions signed before Apr 7, 2019 are unable to load on macOS 10.14.5

I have macOS 10.14.5 (18F132) installed and having three different builds of my product as below : Case 1. Kernel extensions signed on macOS 10.9.5 in Oct 2018 (with —timestamp=none) These extensions were loaded successfully on macOS 10.14.5. Case…
0
votes
1 answer

macOS Application Bundle Frameworks Directory Codesign

I am packing my macOS application into an application bundle. I need to codesign it and pass notarisation. It is possible to put the frameworks in the "Resources" directory? I have two frameworks. Normally, I used to put such frameworks into the…
Kelly o'Brian
  • 415
  • 3
  • 12
1 2 3
8 9