directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Brian Wright (JIRA)" <>
Subject [jira] [Commented] (DIRSTUDIO-1140) Apple Sierra shows corrupted app when launching Studio
Date Wed, 15 Mar 2017 01:09:41 GMT


Brian Wright commented on DIRSTUDIO-1140:

Apple has been taking many many pages from Microsoft's playbook in the last several years.
This is just one in many. For this reason (and hardware complacency), Apple has been losing
computer users to Windows computers that are typically less expensive, give better hardware
choices and offer a similar OS experience (not that Windows 10 is by any stretch a perfect

Personally, I only stick with Mac because of BSD (that and for work reasons). As a systems
admin, having native shell scripting and open source compilation at my fingertips is handy.
Unfortunately, Apple keeps pushing Darwin farther away from Linux with every MacOS X release
making it more and more difficult to justify having a Mac considering that VirtualBox is available
to install and run Linux right on your desktop.

It's issues like this ticket that expose Apple giving the finger not only to developers, but
also to the users. I'm not even sure how this solves a security problem. Having resource fork
or Finder info in a file is an arbitrary change that formerly worked. It's okay to implement
security fixes like this, but not by presenting a banner that tells the user to throw the
app in the trash. That's just insane. At least offer the user an explanation and let them
choose whether or not to run it. I just don't get Apple's developers sometimes. 

> Apple Sierra shows corrupted app when launching Studio
> ------------------------------------------------------
>                 Key: DIRSTUDIO-1140
>                 URL:
>             Project: Directory Studio
>          Issue Type: Bug
>          Components: studio-apacheds
>    Affects Versions: 2.0.0-M12
>            Reporter: Brian Wright
>         Attachments: ADS-Damaged.png
> After downloading and launching Apache Directory Studio 2.0.0 M12 on MacOS X Sierra,
I am presented with a panel that says:
> {quote}"" is damaged and can't be opened. You should move it
to the Trash.{quote}
> The cause of this issue is because of Sierra's enhanced security related to... {{resource
fork, Finder information, or similar detritus not allowed}} and code signing.
> This may or may not be related to code signing specifically, but is more likely related
to the version of Xcode used to create this app version. Here's the security issue:
> {quote}This is a security hardening change that was introduced with iOS 10, macOS Sierra,
watchOS 3, and tvOS 10.
> Code signing no longer allows any file in an app bundle to have an extended attribute
containing a resource fork or Finder info.{quote}
> To find the offending attributes, use:
> {code}xattr -lr /Applications/{code}
> To fix the app and allow it to function, these attributes *must* be stripped with:
> {code}xattr -cr /Applications/{code}
> Better, the next time someone compiles the app for release on MacOS X, make sure it doesn't
include these offending attributes. I would assume the latest version of Xcode should prevent
the creation of these attributes. If not, then the app should be stripped with {{xattr}} before
package and release.

This message was sent by Atlassian JIRA

View raw message