Disabling Gatekeeper in macOS Catalina (10.15.1)

1

I am trying to run some command line tools, and every time it calls a new dependency I get the popup "X cannot be opened because the developer cannot be verified." Obviously, if I open system preferences, I can click on "open anyway", but this is an incredibly onerous process for the tools I'm using.

I found the following supposed workaround:

sudo spctl --master-disable

This enables a radio button labelled "Anywhere" under "Allow apps downloaded from", but it doesn't seem to actually have any effect on the screening of the command line tools. I still get the popups, and in fact, if I close system preferences and reopen it, the "Anywhere" radio button has disappeared.

Any recommendations would be greatly appreciated.

JoFrhwld

Posted 2020-02-19T13:23:33.037

Reputation: 111

What does spctl --status tell you after running sudo spctl --master-disable? – Worthwelle – 2020-02-19T15:04:27.390

@Worthwelle, it says assessments disabled. But then it still threw me the popups – JoFrhwld – 2020-02-19T16:31:34.987

Try disabling the rearm feature with sudo defaults write /Library/Preferences/com.apple.security GKAutoRearm -bool NO (source). It's only supposed to rearm every 30 days, but maybe it's doing it more often.

– Worthwelle – 2020-02-19T16:36:15.337

Still getting the popups. Is it possible there's a different option to be set for the commandline screening? – JoFrhwld – 2020-02-19T16:54:35.257

Would adding exceptions using the command line be sufficient for you? If so, try spctl --add /Path/To/Application.app. For reference: https://www.manpagez.com/man/8/spctl/ I don't think there are separate options for command line screening, but am not familiar enough to give an expert opinion on that.

– Worthwelle – 2020-02-19T17:04:04.010

I even went as far as for i in lib/thirdparty/bin/*; do spctl --add $i; done just now, and still no dice! – JoFrhwld – 2020-02-19T17:08:22.337

It'a really seeming as if my only way forward is to let the thing run till it hits a binary it hasn't tried before, let it crash, click "open anyway", then click "open" when it comes back to it the next time.... – JoFrhwld – 2020-02-19T17:13:50.960

Let us continue this discussion in chat.

– Worthwelle – 2020-02-19T17:20:08.193

No answers