Continuing this in https://github.com/bareos/bareos/discussions/1959 at Andreas' suggestion.
Josh On Wednesday, September 18, 2024 at 3:52:58 AM UTC-4 Joshua Myles wrote: 22.1.5, subscription package: % codesign --display --requirements - /usr/local/bareos/sbin/bareos-fd Executable=/usr/local/bareos/sbin/bareos-fd # designated => cdhash H"65a23b668a41c7f2d56f03d47bf6e517877090e8" % I think the preference is that they be signed but am talking to our macOS team to see what they think. Josh On Tuesday, September 17, 2024 at 7:53:10 AM UTC-4 Andreas Rogge wrote: Hi Joshua, we do sign the DEBs, RPMs and FreeBSD packages with a GPG key and we sign the Windows installer with a Code Signing certificate. I don't think we ever signed the MacOS packages and I'm pretty sure we don't do individual signatures on files contained in the packages. Could you check if 22.1.5 (or any other package) was actually signed? Do have a specific requirement for things to be signed? If that's the case, we can probably discuss your requirements and see what we can do. Best Regards, Andreas Am 16.09.24 um 21:32 schrieb Joshua Myles: > Hi, > > I wanted to raise this here before opening a Github issue in case it's a > simple thing (I'm not a macOS expert). > > We use an MDM system for our macOS desktops, so need to update the > policies every time we upgrade Bareos on a client (FD). I just upgraded > one from 22.1.5 to 22.1.6, and when we went to look at the new bareos-fd > to update the policy signature we found: > > % codesign --display --requirements - /usr/local/bareos/sbin/bareos-fd > /usr/local/bareos/sbin/bareos-fd: code object is not signed at all > % > > Should this not be signed or am I missing something? This is from the > bareos-22.1.6.pkg subscription package. > > Thanks, > > Josh > > -- > You received this message because you are subscribed to the Google > Groups "bareos-users" group. > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected] > <mailto:[email protected]>. > To view this discussion on the web visit > https://groups.google.com/d/msgid/bareos-users/4fcc0439-6ec7-4ee5-8240-474ae8bdcc11n%40googlegroups.com < https://groups.google.com/d/msgid/bareos-users/4fcc0439-6ec7-4ee5-8240-474ae8bdcc11n%40googlegroups.com?utm_medium=email&utm_source=footer>. -- Andreas Rogge [email protected] Bareos GmbH & Co. KG Phone: +49 221-630693-86 http://www.bareos.com Sitz der Gesellschaft: Köln | Amtsgericht Köln: HRA 29646 Komplementär: Bareos Verwaltungs-GmbH Geschäftsführer: Stephan Dühr, Jörg Steffens, Philipp Storz -- You received this message because you are subscribed to the Google Groups "bareos-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/bareos-users/130554fd-42d8-4cfb-8bda-d49ec811cc7fn%40googlegroups.com.
