Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MacOS security issues for pd_darwin objects #2

Open
macumbista opened this issue Aug 29, 2021 · 5 comments
Open

MacOS security issues for pd_darwin objects #2

macumbista opened this issue Aug 29, 2021 · 5 comments

Comments

@macumbista
Copy link

I'm running MacOS 10.15.7 Catalina here. The hardened security permissions of the OS are not allowing your Pure Data objects to be loaded:

/Users/macumbista/Documents/PureData/FluidCorpusManipulation/fluid.bufmfcc.pd_darwin: code signature in (/Users/macumbista/Documents/PureData/FluidCorpusManipulation/fluid.bufmfcc.pd_darwin) not valid for use in process using Library Validation: library load disallowed by system policy
fluid.bufmfcc
... couldn't create

Some ideas for a fix can be found here:

https://cutecoder.org/programming/shared-framework-hardened-runtime/

Suggestions from the Pure Data mailing list are:

  1. sign the Pd app and disable plugin validation (the app side solution for the Pd devs); or
  2. use externals built for a min version of macOS 10.9 (the library side solution for you as the external devs)

(See: https://www.mail-archive.com/pd-dev@lists.iem.at/msg02369.html )

If you know of any other user-space workarounds from your testing I would love to hear them.

@macumbista
Copy link
Author

macumbista commented Aug 29, 2021

The one user space workaround is detailed here:

https://www.mail-archive.com/pd-dev@lists.iem.at/msg02366.html

"I had to go to System Preferences > Security & Privacy and click the button that allows authorization for the last binary that was prevented from launching. I then had to quit and restart Pd [...] But note that you have to do this 3-step process for every external..."

@tremblap
Copy link
Member

Hello Derek, nice to see you here!

My favourite workaround for all things external (Max Pd and SuperCollider) is this one: you can de-quarantine whole folders of them by running in the terminal xattr -d -r com.apple.quarantine PATH2FOLDER

Signing the code for free software is a real pain and expensive and complicates releases... but hey, we might have to bit the bullet

@macumbista
Copy link
Author

Hey PA, nice to see that the Pd code is public, I think at ICMC you said it wasn't ready yet.

Your de-quarantine trick works like a charm, thanks!

@tremblap
Copy link
Member

The public code here for Pd doesn't include (yet) the sexy dataset stuff and machine learning, just segmentation and decompositon and description. I have a branch with a working version of the whole kit, but it is presently pre-alpha. Once we're in beta for it (hopefully in the next month or so) then I'll ask for volunteers on discourse.flucoma.org

@macumbista
Copy link
Author

macumbista commented Aug 29, 2021

Ah I thought some things might be missing in comparison to what you describe in your paper. I'm taking an ML seminar from the University of Oslo right now and was hoping to get some Pd tools to work with.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants