{"id":57866,"date":"2020-01-22T10:29:39","date_gmt":"2020-01-22T16:29:39","guid":{"rendered":"https:\/\/eshop.macsales.com\/blog\/?p=57866"},"modified":"2020-01-28T10:38:12","modified_gmt":"2020-01-28T16:38:12","slug":"how-to-work-with-and-around-gatekeeper","status":"publish","type":"post","link":"https:\/\/eshop.macsales.com\/blog\/57866-how-to-work-with-and-around-gatekeeper\/","title":{"rendered":"How to Work With and Around Gatekeeper"},"content":{"rendered":"\n

Gatekeeper, part of the Mac’s security system<\/a> for ensuring files you download or install on your Mac are safe to use, has been around in one form or another for quite a while. Primarily intended to prevent various forms of malware from infecting the Mac, Gatekeeper has been guarding the Mac since OS X Leopard, though it originally went by the name File Quarantine.<\/p>\n\n\n\n

\"Security<\/figure><\/div>\n\n\n\n

Gatekeeper does its job quite well, standing guard and helping to keep your Mac safe. But sometimes, this tireless security system can get in the way of apps and extensions you need to run but don\u2019t meet the sometimes strict requirements for getting past Gatekeeper.<\/p>\n\n\n\n

In this Rocket Yard guide, we\u2019ll look at how Gatekeeper operates, best use, and how to get around some of the restrictions Gatekeeper imposes.<\/p>\n\n\n\n

Gatekeeper: A Bit of History<\/h3>\n\n\n\n

With the introduction of OS X Leopard, Apple added a new file quarantine service to protect users from various types of malware, with Trojan horses<\/a> being a common issue back then. <\/p>\n\n\n\n

Files downloaded to the Mac were marked as quarantined, and prevented from running until the user acknowledged that they had indeed intentionally downloaded the file and wished to run the app. This prevented malicious sites from downloading and running apps without the user knowing about them. It was a very basic security measure, but over time, Apple developed it into the Gatekeeper system that is installed on all Macs today.<\/p>\n\n\n\n

With Snow Leopard, Apple added the ability to check files against known instances of malware. The system could also check web plug-ins and block them from functioning, including zero-day exploits that had been discovered.<\/p>\n\n\n\n

OS X Lion saw the Gatekeeper name applied to the set of security technology Apple had been developing, and was the first time that developers needed to sign their apps to allow them to get past the Gatekeeper guard.<\/p>\n\n\n\n

\"Gatekeeper
Gatekeeper’s default settings only allow apps downloaded from the App Store to be installed.<\/figcaption><\/figure><\/div>\n\n\n\n

File Quarantine System<\/h3>\n\n\n\n

Although Gatekeeper has advanced to become a robust guardian, it still makes use of the File Quarantine system to identify known malware. File Quarantine is essentially a blacklist of malware signatures that Gatekeeper uses to identify a downloaded file that includes any known malware.<\/p>\n\n\n\n

Apple updates the File Quarantine system on a regular basis, and downloads the updates to your Mac along with other system and security updates. There was a time when some users experienced multiple File Quarantine updates so often that it was reducing system performance, or at least performance while performing Internet-related activities, such as browsing, email, and messaging. Although those issues seem to be long gone, there was a means to force the updates to File Quarantine to halt.<\/p>\n\n\n\n

While there doesn\u2019t seem to be a reason today to prevent the updates, it can still be done with these steps:<\/p>\n\n\n\n

OS X Mountain Lion and earlier:<\/strong> Open System Preferences and select the Security & Privacy preference pane.<\/p>\n\n\n\n

Click the lock and enter an administrator name and password.<\/p>\n\n\n\n

Click the Advanced button.<\/p>\n\n\n\n

In the sheet that drops down, place or remove the checkmark in the “Automatically update safe download list” item.<\/p>\n\n\n\n

OS X Mavericks through macOS High Sierra:<\/strong> Open System Preferences and select the App Store icon.<\/p>\n\n\n\n

Place or remove the checkmark from the “Install system data files and security updates” item.<\/p>\n\n\n\n

macOS Mojave and later:<\/strong> Open System Preferences and select the Software Update preference pane.<\/p>\n\n\n\n

Click the Advanced button. In the sheet that drops down, place or remove the checkmark in the “Install system data files and security updates” box.<\/p>\n\n\n\n

Note<\/em><\/strong>: I don\u2019t advise preventing File Quarantine updates. However, if you\u2019re experiencing a problem when installing or restoring to an older version of the OS, it can be helpful to delay some updates until you have the system fully configured. <\/p>\n\n\n\n

\"Option
In Mojave and Catalina, the options for security updates relating to Gatekeeper are located in the Software Update preference pane.<\/figcaption><\/figure><\/div>\n\n\n\n

Gatekeeper and Opening Apps<\/h3>\n\n\n\n

Gatekeeper is designed to prefer only to allow trusted apps to be installed on the Mac. Trusted apps are those downloaded from the App Store<\/a>. Software from the App Store has been scanned for known malware, and the developer has digitally signed the app to confirm that it came from an authorized Apple developer. This helps to ensure the app hasn\u2019t been tampered with or altered in any way.<\/p>\n\n\n\n

Of course, many Mac users make use of apps that are directly available from developers, which have additional features built into the app that may not be allowed in the App Store. Gatekeeper can be configured to allow these types of apps that still come from an authorized Apple developer but aren\u2019t distributed via the App Store.<\/p>\n\n\n\n

Gatekeeper can also be set to not block apps from being installed, essentially letting you install apps from anywhere created by anybody, Apple developer or not.<\/p>\n\n\n\n

You can adjust Gatekeeper\u2019s settings using the following methods:<\/p>\n\n\n\n

Open System Preferences by clicking on its icon in the Dock or selecting System Preferences from the Apple menu.<\/p>\n\n\n\n

Select the Security & Privacy preference pane.<\/p>\n\n\n\n

Click on the General tab.<\/p>\n\n\n\n

You\u2019ll find the Gatekeeper settings in the “Allow apps downloaded from:” section.<\/p>\n\n\n\n

Depending on the version of the Mac OS you\u2019re using, you\u2019ll see either two or three options:<\/p>\n\n\n\n