Skip to content

Issue with com.apple.quarantine attribute #3

@Techcable

Description

@Techcable

Apple has a com.apple.quarantine attribute, which causes problems with unsigned binaries.

Problem

Running the installed ix from the shell gives the following error

$ ix
fish: Job 1, 'ix' terminated by signal SIGKILL (Forced quit)

Attempting to debug with lldb ix gives the following warning :

'ix' is damaged and can't be opened. You should move it to the Trash.

As suggested by this reddit post, running xattr -l $(realpath $(which ix)) gives the problematic attributes:

com.apple.provenance: 
com.apple.quarantine: 0181;6a21e7ed;Homebrew\x20Cask;268813F6-638D-43F8-95CD-83F0EB254F63

Proposed Fix

Immediately after instillation, we should run the following:

xattr -d com.apple.quarantine $installed_binary_path
xattr -d com.apple.provenance $installed_binary_path

No need for -r flag since this is a single file and not a directory.

Alternative Fix

Sign all the binaries with an official code signature before publishing them. This is expensive, as it would require an apple developer license.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions