#451: mac gatekeeper quarantine removal#1794
Conversation
…ntine-removal' into feature/451-mac-gatekeeper-quarantine-removal
Pull Request Test Coverage Report for Build 23855312848Details
💛 - Coveralls |
hohwille
left a comment
There was a problem hiding this comment.
@shodiBoy1 thanks for your PR. Great that you are working on this nasty problem that is currently blocking Mac users and renders the UX of IDEasy on Mac void. 👍
Currently, I do not see the difference in the xattr compared to PR #453. Can you explain why this should fix the problem now? Have you tested this approach on MacOS and it worked for unsigned apps like e.g. IntelliJ?
FYI: Did you also see this comment? #451 (comment)
When we remove the quarantine attribute, MacOS protected the app directory and we cannot make any modifications to it after that. This IMHO implies that we cannot keep the current solution with the .ide.software.version file that we simply copy to the linkDir as a workaround. Maybe it could work if we do that before we remove the quarantine attribute?
Further, in PR #453 @jan-vcapgemini made a review comment that this xattr execution should be moved to MacOsHelper what makes sense to me and should be followed.
| * https://github.com/devonfw/IDEasy/issues/1747[#1747]: Fixed macOS x64 native image build using macos-15-intel runner | ||
| * https://github.com/devonfw/IDEasy/issues/1738[#1738]: FileAccess.delete no longer follows directory links during recursive delete | ||
| * https://github.com/devonfw/IDEasy/issues/1151[#1151]: Use uname -m for runtime architecture detection on Mac/Linux | ||
| * https://github.com/devonfw/IDEasy/issues/1770[#1770]: Fix setup hanging due to buffered log output during license prompt | ||
| * https://github.com/devonfw/IDEasy/issues/1771[#1771]: Maven version 3.9.1x are now available | ||
| * https://github.com/devonfw/IDEasy/issues/1647[#1647]: Fixed CVE detection for rancher desktop | ||
| * https://github.com/devonfw/IDEasy/issues/1363[#1363]: Tool uninstallation in force mode now also removes its plugins | ||
| * https://github.com/devonfw/IDEasy/issues/1687[#1687]: Fixed JLine warning about restricted method |
There was a problem hiding this comment.
Seems something went wrong on conflict resolution.
| * https://github.com/devonfw/IDEasy/issues/1747[#1747]: Fixed macOS x64 native image build using macos-15-intel runner | |
| * https://github.com/devonfw/IDEasy/issues/1738[#1738]: FileAccess.delete no longer follows directory links during recursive delete | |
| * https://github.com/devonfw/IDEasy/issues/1151[#1151]: Use uname -m for runtime architecture detection on Mac/Linux | |
| * https://github.com/devonfw/IDEasy/issues/1770[#1770]: Fix setup hanging due to buffered log output during license prompt | |
| * https://github.com/devonfw/IDEasy/issues/1771[#1771]: Maven version 3.9.1x are now available | |
| * https://github.com/devonfw/IDEasy/issues/1647[#1647]: Fixed CVE detection for rancher desktop | |
| * https://github.com/devonfw/IDEasy/issues/1363[#1363]: Tool uninstallation in force mode now also removes its plugins | |
| * https://github.com/devonfw/IDEasy/issues/1687[#1687]: Fixed JLine warning about restricted method |
| postExtractHook(postExtractHook, properInstallDir); | ||
| move(properInstallDir, targetDir); | ||
| delete(tmpDir); | ||
| removeQuarantineAttribute(targetDir); |
There was a problem hiding this comment.
This should only happen for an application. The extract function is generic and can also be used to extract a ZIP file with pure data or config that is not an application. Please note that the executed xattr command will typically trigger a popup with password request so this should only appear for applications (ideally only if they are not signed).
Please check PR #453 where this was already done in the right place.
| ProcessResult result = this.context.newProcess().executable("xattr") | ||
| .addArgs("-r", "-d", "com.apple.quarantine", path).run(ProcessMode.DEFAULT_SILENT); |
There was a problem hiding this comment.
This looks exactly like what I did in PR #453. However, I tested my solution and it did not work.
Am I missing something or why should it work now?
This PR fixes #451
Implemented changes:
com.apple.quarantine) from all extracted tool files usingxattr -r -dafter extraction inFileAccessImplChecklist for this PR
mvn clean testlocally all tests pass and build is successful#«issue-id»: «brief summary»(e.g.#921: fixed setup.bat). If no issue ID exists, title only.In Progressand assigned to you or there is no issue (might happen for very small PRs)with
internal