{"id":32870,"date":"2021-06-16T17:14:41","date_gmt":"2021-06-16T21:14:41","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=32870"},"modified":"2021-06-16T17:17:27","modified_gmt":"2021-06-16T21:17:27","slug":"tightening-the-mac-app-store-screws-again","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2021\/06\/16\/tightening-the-mac-app-store-screws-again\/","title":{"rendered":"Tightening the Mac App Store Screws Again"},"content":{"rendered":"

Timo Perfitt<\/a>:<\/p>\n

caching server utility is henceforth REJECTED from the app store. calling an apple command line tool to call another apple tool via XPC is FORBIDDEN and just because we have a TEMPORARY EXCEPTION it does not it should be USED.<\/p>\n

i should appeal. i literally have no idea when temp exceptions are appropriate. is it when app wants to show preferential treatment to a specific developer?<\/p>\n

[…]<\/p>\n

i call an apple tool as a normal user and get back json about caching servers on the network. i then format the data and display it to make it a useful IT tool. NOT ALLOWED.<\/p><\/blockquote>\n\n

I can see where Apple’s coming from because it probably didn’t intend this XPC interface to be public API. But it would be nice to have a clearer policy of when you can use the com.apple.security.temporary-exception.mach-lookup.global-name<\/code> entitlement and when you can’t. There are definitely apps in the store that use it (including Microsoft Word<\/a>). This particular use seems harmless, and the app sounds useful.<\/p>\n\n

Maxwell Swadling<\/a>:<\/p>\n

\n

Unfortunately Apple is no longer accepting updates to Max Inspect, my app for inspecting entitlements, signing, etc. of Mac apps all in one place.<\/p>\n<\/blockquote>\n\n

Max Inspect also uses that entitlement and has been in the Mac App Store since 2018. Now it can no longer be updated due to an unannounced change to an unwritten rule. As far as I know, there is no other API for checking an app’s notarization status. (Apparency<\/a> uses it, too.)<\/p>\n\n

Remember when Phil Schiller suggested<\/a> that the Mac App Store should be the “go-to place” for developer tools? That can’t happen if the existing tools get kicked out.<\/p>\n\n

Previously:<\/p>\n