[
https://issues.apache.org/jira/browse/DIRSTUDIO-1140?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15925370#comment-15925370
]
Brian Wright commented on DIRSTUDIO-1140:
-----------------------------------------
Apple has been taking many many pages from Microsoft's playbook in the last
several years. This is just one in many. For this reason (and hardware
complacency), Apple has been losing computer users to Windows computers that
are typically less expensive, give better hardware choices and offer a similar
OS experience (not that Windows 10 is by any stretch a perfect experience).
Personally, I only stick with Mac because of BSD (that and for work reasons).
As a systems admin, having native shell scripting and open source compilation
at my fingertips is handy. Unfortunately, Apple keeps pushing Darwin farther
away from Linux with every MacOS X release making it more and more difficult to
justify having a Mac considering that VirtualBox is available to install and
run Linux right on your desktop.
It's issues like this ticket that expose Apple giving the finger not only to
developers, but also to the users. I'm not even sure how this solves a security
problem. Having resource fork or Finder info in a file is an arbitrary change
that formerly worked. It's okay to implement security fixes like this, but not
by presenting a banner that tells the user to throw the app in the trash.
That's just insane. At least offer the user an explanation and let them choose
whether or not to run it. I just don't get Apple's developers sometimes.
> Apple Sierra shows corrupted app when launching Studio
> ------------------------------------------------------
>
> Key: DIRSTUDIO-1140
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-1140
> Project: Directory Studio
> Issue Type: Bug
> Components: studio-apacheds
> Affects Versions: 2.0.0-M12
> Reporter: Brian Wright
> Attachments: ADS-Damaged.png
>
>
> After downloading and launching Apache Directory Studio 2.0.0 M12 on MacOS X
> Sierra, I am presented with a panel that says:
> {quote}"ApacheDirectoryStudio.app" is damaged and can't be opened. You should
> move it to the Trash.{quote}
> The cause of this issue is because of Sierra's enhanced security related
> to... {{resource fork, Finder information, or similar detritus not allowed}}
> and code signing.
> This may or may not be related to code signing specifically, but is more
> likely related to the version of Xcode used to create this app version.
> Here's the security issue:
> {quote}This is a security hardening change that was introduced with iOS 10,
> macOS Sierra, watchOS 3, and tvOS 10.
> Code signing no longer allows any file in an app bundle to have an extended
> attribute containing a resource fork or Finder info.{quote}
> To find the offending attributes, use:
> {code}xattr -lr /Applications/ApacheDirectoryStudio.app{code}
> To fix the app and allow it to function, these attributes *must* be stripped
> with:
> {code}xattr -cr /Applications/ApacheDirectoryStudio.app{code}
> Better, the next time someone compiles the app for release on MacOS X, make
> sure it doesn't include these offending attributes. I would assume the latest
> version of Xcode should prevent the creation of these attributes. If not,
> then the app should be stripped with {{xattr}} before package and release.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
