Execution Gatekeeper (macOS)
when user attempts open application such attribute, system delay execution , verify whether is:
blacklisted,
code-signed,
code-signed apple or certified developer,
code-signed , code-signed contents still match signature.
since mac os x snow leopard, system keeps 2 blacklists identify known malware or insecure software. blacklists updated periodically. if application blacklisted, file quarantine refuse open , recommend user move trash.
gatekeeper refuse open application if code-signing requirements not met. apple can revoke developer s certificate application signed , prevent further distribution.
once application has passed file quarantine or gatekeeper, allowed run , not verified again.
Comments
Post a Comment