[MacPorts] #70945: All code needs to be signed as of macOS 15
MacPorts
noreply at macports.org
Fri Sep 27 03:25:30 UTC 2024
#70945: All code needs to be signed as of macOS 15
------------------------+--------------------
Reporter: ryandesign | Owner: (none)
Type: defect | Status: new
Priority: Normal | Milestone:
Component: base | Version: 2.10.1
Keywords: sequoia | Port:
------------------------+--------------------
After installing the buildbot worker software on a 2018 Mac mini running
macOS Sequoia, it could not connect to the buildmaster, claiming "No route
to host", despite `ping` and `ssh` being able to reach that host just fine
from the Terminal.
It sounds like macOS 15 requires all code to be signed to access devices
on the local network, unless they are run manually in the Terminal. After
I ran
{{{
sudo codesign -dv -r-
/opt/bblocal/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python
}}}
I got a dialog box asking if I wanted to allow Python to connect to
devices on the local network, and after I said yes, then buildbot was able
to connect to the master. Only after doing this did Python appear in
System Settings > Privacy & Security > Local Network.
Previously I had installed buildbot on an unsupported Mac running macOS
Sequoia via OpenCore Legacy Patcher and had not encountered this problem,
probably because OCLP disables some aspects of System Integrity
Protection.
The need to sign all code on macOS 15 was also mentioned in
https://github.com/macports/macports-ports/pull/25862 where it was
proposed to add code to a single port to sign its files. It needs to be
handled in MacPorts base so that such signing code doesn't need to be
added to all 40,000 ports individually.
How we are going to handle pushing out signed versions of all the ports
that macOS 15 users have already installed without revbumping all ports, I
don't know.
--
Ticket URL: <https://trac.macports.org/ticket/70945>
MacPorts <https://www.macports.org/>
Ports system for macOS
More information about the macports-tickets
mailing list