Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

“PageEdit” can’t be opened because Apple cannot check it for malicious software. #31

Closed
rwebber81 opened this issue Jul 19, 2023 · 4 comments

Comments

@rwebber81
Copy link

Version: PageEdit.app-1.9.20-Mac.txz
MacOS Version: 13.4.1
Error:
“PageEdit” can’t be opened because Apple cannot check it for malicious software.
This software needs to be updated. Contact the developer for more information.

Appears the application needs to be notarised.
While right-clicking and 'open' can bypass this, in a larger deployment this means that each device needs to be manually approved, which is not viable.

Please let me know if you would like any more information.

@kevinhendricks
Copy link
Contributor

kevinhendricks commented Jul 19, 2023

Not a bug.

PageEdit is not "notarized" and will never be "notarized" as OpenSource software that does not use the Mac AppStore should never allow Apple to control things by its "approval process". If Apple really cared about security of an app they can easily see each and every line of our source code.

I already pay over $100 annually for a digital signature because Apple required it with no relief from Apple for Sigil/PageEdit being completely free and me volunteering my time for over that last 7 years to help develop them. More importantly, Apple has no right to final say as to whether users can use OpenSource software that is NOT distributed through their App store.

As you noted, aside from that, to run PageEdit simply right click on the PageEdit icon and select "open". MacOS will then warn you. Then right click on the PageEdit icon the second time and select "open" again and PageEdit will launch, my digital signature will be verified as it has for over 7 years, and run just fine.

If users let Apple completely determine what runs on their own desktop machine, they will be completely in a walled garden and subject to Apple's whims. I will not aide or abet Apple in doing this and neither should anyone else. They are using FUD (fear uncertainty and doubt) just like Microsoft has long been accused of to try to take complete control of the desktop. If that is what you want, then stay completely away from OpenSource software.

The day macOS desktops stops running what I tell it to on my own machine, will be the day I abandon macOS and return to Linux.

And for multiple installations, simply use xattr -d com.apple.quarantine on the PageEdit.app once and move it around. I literally have it as part of the script to install trusted software.

Closing this issue as not a bug.

@kevinhendricks
Copy link
Contributor

kevinhendricks commented Jul 19, 2023

FWIW, according to Apple:

"Applications and packages installed through management systems bypass Gatekeeper and do not need to be notarized."

And IMHO, no admin should be sending company internal apps to Apple for notarization. It would be a security disaster in the making. Creating a huge single point of failure.

And of course, you can always build PageEdit from source (along with all of Qt and QtWebEngine) and sign it yourselves and even notarize you own builds if you so desire. It is opensource. Just abide by the rules of the GPL license and make your source available to everyone. Build docs are provided.

@rwebber81
Copy link
Author

rwebber81 commented Jul 20, 2023 via email

@kevinhendricks
Copy link
Contributor

Sore subject as the same issue has been brought up repeatedly in Sigil and no one searches for the closed issue. And the same on Mobileread.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants