{"id":14027,"date":"2016-03-31T10:46:46","date_gmt":"2016-03-31T14:46:46","guid":{"rendered":"http:\/\/mjtsai.com\/blog\/?p=14027"},"modified":"2016-05-17T10:00:25","modified_gmt":"2016-05-17T14:00:25","slug":"gatekeeper-bug-in-mac-os-x-10-11-4","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2016\/03\/31\/gatekeeper-bug-in-mac-os-x-10-11-4\/","title":{"rendered":"Gatekeeper Bug in Mac OS X 10.11.4"},"content":{"rendered":"

Paul Kim<\/a>:<\/p>\n

\n

Gatekeeper seems to be broken for non-app bundles. Heads up to devs shipping prefpanes, screensavers, plugins, etc.<\/p>\n<\/blockquote>\n

spctl<\/tt> complains about an “obsolete resource envelope”.<\/p>\n

Update (2016-03-31): Daniel Jalkut<\/a> notes that this even affects Apple’s own Network Link Conditioner preference pane.<\/p>\n

Daniel Jalkut<\/a>:<\/p>\n

This is a minor annoyance for folks trying to install an obscure development tool, but it’s a major issue for developers like Noodlesoft whose entire livelihood is built on the distribution of software packaged as a preference pane. The scary wording in the dialog casts doubt on the reputation of the developer, and for the more savvy, on the reputation of Apple’s ability to properly assess the trustworthiness of software that we download.<\/p>\n

[…]<\/p>Let’s hope Apple can address this problem soon. Although it doesn’t pose a security risk, it seems appropriate that they could include this in a security update. After all, it has everything to do with preserving trust between users, developers, and Apple.<\/blockquote>\n

Update (2016-04-06): Paul Kim<\/a>:<\/p>\n

After filing a DTS incident, Apple confirmed it as a bug (I’ve filed rdar:\/\/25466753). There was no information about when a fix would be made available and given that Apple is not known for being nimble about these things and that I was losing customers, I followed the advice of some colleagues and took matters into my own hands.<\/p>\n

The result is that starting with Hazel 3.3.8, it will ship with an installer app. The installer app still goes through System Preferences as I still think that its installation process works well.<\/p>\n

[…]<\/p>\n

One can debate how much Apple cares about non-app-bundled software but when the workaround is to suggest people bypass Gatekeeper, they should be very concerned. False positives only erode the confidence people have in your security systems and you don’t want them to get in the habit of casually bypassing them.<\/p><\/blockquote>\n

Update (2016-05-17): Paul Kim<\/a>:<\/p>\n

10.11.5 fixes the Gatekeeper\/prefpane issue. I’ve already switched to shipping an installer app but might be helpful to others who haven’t<\/p><\/blockquote>","protected":false},"excerpt":{"rendered":"

Paul Kim: Gatekeeper seems to be broken for non-app bundles. Heads up to devs shipping prefpanes, screensavers, plugins, etc. spctl complains about an “obsolete resource envelope”. Update (2016-03-31): Daniel Jalkut notes that this even affects Apple’s own Network Link Conditioner preference pane. Daniel Jalkut: This is a minor annoyance for folks trying to install an […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"","apple_news_api_id":"","apple_news_api_modified_at":"","apple_news_api_revision":"","apple_news_api_share_url":"","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[1143,131,465,30,1199,1181],"class_list":["post-14027","post","type-post","status-publish","format-standard","hentry","category-technology","tag-apple-software-quality","tag-bug","tag-gatekeeper","tag-mac","tag-mac-os-x-10-11","tag-system-preferences"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/14027","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=14027"}],"version-history":[{"count":5,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/14027\/revisions"}],"predecessor-version":[{"id":14567,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/14027\/revisions\/14567"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=14027"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=14027"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=14027"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}