Unsigned apps going to be disabled in Sonoma?

[bzgnyc2]

Can anyone confirm in the following means that it will no longer be possible to run unsigned apps in Sonoma (or if this is just "services" what qualifies as "services")? I assume if unasigned apps are disabled that means just things that use AppKit and not say legacy UNIX software?

From the Sonoma 14.8 security notes:

AppKit​

Available for: macOS Sonoma​

​

Impact: An app may be able to access protected user data​

​

Description: The issue was resolved by blocking unsigned services from launching on Intel Macs.​

​

CVE-2025-43321: Mickey Jin (@patch1t)​

I haven't installed this update yet and not sure my plan if Apple completely takes away unsigned apps (as opposed to hiding option to allow).

 

[chrfr]

Can anyone confirm in the following means that it will no longer be possible to run unsigned apps in Sonoma (or if this is just "services" what qualifies as "services")? I assume if unasigned apps are disabled that means just things that use AppKit and not say legacy UNIX software?

From the Sonoma 14.8 security notes:

AppKit​

Available for: macOS Sonoma​

​

Impact: An app may be able to access protected user data​

​

Description: The issue was resolved by blocking unsigned services from launching on Intel Macs.​

​

CVE-2025-43321: Mickey Jin (@patch1t)​

I haven't installed this update yet and not sure my plan if Apple completely takes away unsigned apps (as opposed to hiding option to allow).

No, that's not what that will fix. You'll still be able to run unsigned apps.

 

[bzgnyc2]

No, that's not what that will fix. You'll still be able to run unsigned apps.

Can you illuminate what it does mean? What is being blocked and why wouldn't the same fix apply to Apple Silicon?

 

[bogdanw]

You can self-sign the app https://forums.macrumors.com/thread...lity-to-launch-unsigned-applications.2441792/