[MacPorts] #65302: darktable/inkscape: unable to access user files, when run via app bundle on big sur or monterey

[MacPorts]

#65302: darktable/inkscape: unable to access user files, when run via app bundle on
big sur or monterey
---------------------------------+----------------------------------------
  Reporter:  mascguy             |      Owner:  mascguy
      Type:  defect              |     Status:  assigned
  Priority:  Normal              |  Milestone:
 Component:  ports               |    Version:  2.7.2
Resolution:                      |   Keywords:  app-bundle bigsur monterey
      Port:  darktable inkscape  |
---------------------------------+----------------------------------------

Comment (by mascguy):

 I ran some experiments in Big Sur and Monterey yesterday, specifically
 related to adding GateKeeper exceptions for these apps.

 The original state -- before making any changes -- are as follows:

 {{{
 $ spctl --assess --verbose /Applications/MacPorts/darktable.app
 /Applications/MacPorts/darktable.app: rejected
 source=no usable signature

 $ spctl --assess --verbose /Applications/MacPorts/Inkscape.app
 /Applications/MacPorts/Inkscape.app: rejected
 source=no usable signature
 }}}

 That's an expected result, as we're not signing the apps.

 Then I added app-specific exceptions for these, and re-checked the
 assessment results:

 {{{
 $ sudo spctl --add --label "org.macports"
 /Applications/MacPorts/darktable.app
 $ sudo spctl --add --label "org.macports"
 /Applications/MacPorts/Inkscape.app

 $ spctl --assess --verbose /Applications/MacPorts/darktable.app
 /Applications/MacPorts/darktable.app: accepted
 source=org.macports

 $ spctl --assess --verbose /Applications/MacPorts/Inkscape.app
 /Applications/MacPorts/Inkscape.app: accepted
 source=org.macports
 }}}

 However, even after adding these exceptions - and ensuring the apps are
 listed in the "Full Disk Access" section of the macOS Security prefpane,
 file/directory access is still disallowed. (Also tried rebooting afterward
 - which shouldn't be needed, but figured why not? - but no dice.)

-- 
Ticket URL: <https://trac.macports.org/ticket/65302#comment:10>
MacPorts <https://www.macports.org/>
Ports system for macOS