Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

macOS 15.1 completely removes ability to launch unsigned applications

bogdanw said:
The version 20231214 (6) from https://download.silicondust.com/hdhomerun/hdhomerun_mac_20231214.dmg
has a valid certificate.
Click to expand...
Thanks. I downloaded that dmg this morning and used pkgutil+cpio to extract the the app, and the signature was expired. After seeing your reply, I did the same thing again and the signature is ok. I must've misplaced my mind, temporarily I hope.

bogdanw said:
The AppStore version 20240708 (11) has an expired certificate, but works in Sequoia 15.1.
Click to expand...
Ok in Sonoma too, it's what I run more-or-less daily.
 
Nermal said:
We've been able to work around the unsigned bundle issue by running the binaries directly... at least for now.
Click to expand...
Thanks for that. Some days I produce a lot of throwaway binaries (for reasons) and it would be pain in the arse to have to sign them.
 
Same problem affects also .webarchive files created on Safari on iOS 18.1: if I save a web page in this format on my iCloud account, there is no way to open it on macOS, throws same security warning. Any way to self-sign it?
 
  • Wow
Reactions: Nermal
In my opinion, it’s a Sequoia bug.
Apple fixed CVE-2024-44270 and CVE-2024-44280 in Sequoia, Sonoma and Ventura, but only Sequoia gives this error.

"AppleMobileFileIntegrity
Impact: An app may be able to modify protected parts of the file system
Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.
CVE-2024-44280"
"AppleMobileFileIntegrity
Impact: A sandboxed process may be able to circumvent sandbox restrictions
Description: A logic issue was addressed with improved validation.
CVE-2024-44270"
https://support.apple.com/en-us/100100

If you want to learn something about macOS from YouTube
"Dirty Bin Cache: A New Code Injection Poisoning Binary Translation Cache"
 
Last edited:
fmaione said:
Same problem affects also .webarchive files created on Safari on iOS 18.1: if I save a web page in this format on my iCloud account, there is no way to open it on macOS, throws same security warning. Any way to self-sign it?
Click to expand...
That might be just an iCloud issue. Get the webarchive files out of iCloud onto your Desktop or other local folder and try to open them.
 
Fishrrman said:
nermal wrote in #10 above:
"OpenSCAD is the one I had trouble with. Choosing "Anywhere" was not sufficient to get it working."

I'm typing this on a 2018 Mini that's still using Mojave (OS 10.14.6).
SIP is disabled.
Gatekeeper is turned completely off (open apps from anywhere selected).

I downloaded "OpenSCAD" using the link in reply 10 above.
If I try to launch it, I get this:
View attachment 2446325
(I could not try the "Sentinel" app mentioned above because it won't run on OS 10.14)

I'm not a programmer or coder.
But this indicates to me that the problem is not localized in OS 15.1.
Same problem 'way back in OS 10.14 ...
Click to expand...
for OpenSCAD, I did find that you can open it through the terminal. You need to go into the MacOS folder in the .app and launch from there. See screenshot. Launching with the ampersand launches it as its own process so you do not need to keep the terminal open.

Xnip2024-11-13_21-37-55.jpeg
 
fmaione said:
Same problem affects also .webarchive files created on Safari on iOS 18.1: if I save a web page in this format on my iCloud account, there is no way to open it on macOS, throws same security warning. Any way to self-sign it?
Click to expand...
Just had this hit me – a webpage saved in Safari iOS as webarchive to icloud drive can't be opened in Safari macOS 15.2, no matter if it's saved in iCloud Drive or copied to some folder on the local SSD (copying to Desktop is impossible).

Preview works and I can read the article, and it's also indexed by Spotlight, but so far no way to actually open it.
Anybody found a workaround? That's one of the sillier bugs / restrictions by Apple, iMHO.

(And since I'm here complaining: does anybody know of a good little program to organise and view webarchive files?)
 
workerbee said:
Just had this hit me – a webpage saved in Safari iOS as webarchive to icloud drive can't be opened in Safari macOS 15.2, no matter if it's saved in iCloud Drive or copied to some folder on the local SSD (copying to Desktop is impossible).
Click to expand...
Manually remove the quarantine attribute
Code: 
xattr -d com.apple.quarantine /path/to/file.webarchive
 
  • Like
Reactions: Steve Gosselin
bogdanw said:
Manually remove the quarantine attribute
Code: 
xattr -d com.apple.quarantine /path/to/file.webarchive
Click to expand...
Ah, so the workflow on MacOS is
  • see interesting content in Safari
  • hit export button, select «save as webarchive», save to iCloud Drive
  • try to open/read file
  • see idiotic Apple warning
  • go to Shell, find name of file, do some silly xattr mumbojumbo
  • open / read file
While on the much more closed and secure iOS it is
  • see interesting content in Safari
  • hit export button, select «save as webarchive», save to iCloud Drive
  • open/ and read file with no warnings whatsoever
Thanks for the suggestion, but these hoops are not for me. I'm of an age that still remembers «it just works».
 
Is there a valid reason webarchives are treated like apps in MacOS but apparently not in iOS, or is it just that everyone at Apple has to work on including AI dreck in as many apps and OS corners as possible to satisfy Apple's real customer base (ie Wall Street)?
 
Probably because they can contain and run javascript or wasm. Anyway, it would be good to send a feedback about it in the Feedback Assistant app.
 
Thanks! I had a problem after updating to OS15.2 from OS14.x with an application called VVV. Your script fixed it.
 
bogdanw said:
OpenSCAD and SeaMonkey have no signatures.
If you are referring to HDHomeRun from https://www.silicondust.com/support/downloads/ it works in Sequoia 15.1.

Here is what happens with SeaMonkey and an updated version of the AppleScript above in action
View attachment 2446542


AppleScript: 
set theApp to choose file with prompt "Please select an application:" of type {"app"}
set appPath to POSIX path of theApp
try
    set QuAtt to "Quarantine attribute:" & return & (do shell script "xattr -pl com.apple.quarantine " & quoted form of appPath)
on error
    set QuAtt to "Quarantine attribute not present"
end try
try
    set SignStat to "Signing ststus:" & return & (do shell script "codesign -dv " & quoted form of appPath & " 2>&1")
on error
    set SignStat to "Signing ststus:" & return & "the application is not signed at all"
end try
display dialog QuAtt & return & SignStat & return & "Would you like to" buttons {"Don't Continue", "Continue"} default button "Continue" cancel button "Don't Continue"
set theQuestion to display dialog "Would you like to" buttons {"Remove quarantine attribute", "Self-sign the app", "Remove quarantine & Self-sign"} default button "Self-sign the app"
set theAnswer to button returned of theQuestion
if theAnswer is equal to "Remove quarantine attribute" then
    do shell script "xattr -rd com.apple.quarantine " & quoted form of appPath
end if
if theAnswer is equal to "Self-sign the app" then
    do shell script "codesign --remove-signature " & quoted form of appPath & "; codesign --force --deep --sign - " & quoted form of appPath
end if
if theAnswer is equal to "Remove quarantine & Self-sign" then
    do shell script "xattr -rd com.apple.quarantine " & quoted form of appPath
    do shell script "codesign --remove-signature " & quoted form of appPath & "; codesign --force --deep --sign - " & quoted form of appPath
end if
set theQuestion2 to display dialog "Operation completed." & return & "Would you like to open the app?" buttons {"Yes", "No"} default button "Yes" cancel button "No"
set theAnswer2 to button returned of theQuestion2
if theAnswer2 is equal to "Yes" then
    do shell script "open -a " & quoted form of appPath
end if
Click to expand...


Thanks so much!
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back