1 reply to this topic

[hmtinc]

Gatekeeper is new update to apples core security system in mac os x . Which is planned to be implemented into 10.8 and newer updates of 10.7.
Gatekeeper when enabled will only allow apps with signed developer ids to be installed (unless user Give a exception).
So it is essential that all mac users with 10.7 and mac users who are going to get 10.8 mountain lion to know how to disable/ Enable Gate keeper so here is the instructions



Enable / Disable GateKeeper on
Mac OSX Lion 10.7.3

Yes if you didn't know already gatekeeper isn't just a feature in 10.8 it is actually already in the 10.7.3 version of lion.
But currently there isn't any graphical interface to enable / disable gate keeper. In the future apple may decide to add the preference pane into system settings.
For now the only way to enable / disable gate keeper on this version is to use terminal and here is how

1. make sure you are running 10.7.3 or higher
2. Launch Terminal And type etheir one of the below

Enable Gate Keeper Code (below)

sudo spctl --enable

Disable Gate Keeper Code (below)

sudo spctl --disable

[Currently there is no applications on 10.7 that support gate keeper so be warned !!!!]


Enable / Disable GateKeeper on
Mac OSX Mountain Lion 10.8

1. Open System Preferences
2. Click Security
3. On the first tab on the bottom portion choose your option
- Anywhere = Gate keeper off
- App store and id dev = Gate keeper on with extra features
- App Store Only = Gate keeper on

[syao]

Interesting article. I noticed spctl is published in the Apple Open Source archive, in the last security_systemkeychain package.

It's included in 10.7.3, but, for some odd reason (on my system at least), there isn't a corresponding man page. The man page sources are available in the security_systemkeychain package though. Here's the formatted page if anyone wants to look at it:

Spoiler

spctl(8)		  BSD System Manager's Manual		      spctl(8)

NAME
     spctl -- SecAssessment system policy security

SYNOPSIS
     spctl --assess [-t type] [-] file ...
     spctl --enable | --disable
     spctl --status


DESCRIPTION
     spctl manages the security assessment policy subsystem. This subsystem
     maintains and evaluates rules that determine whether the system allows
     the installation, execution, and other operations on files on the system.

OPTIONS
     spctl requires one command option that determines its principal opera-
     tion:

     -a, --assess
	      Requests that spctl perform an assessment on the files given.

     --enable
	      Enable the assessment subsystem. Operations that are denied by
	      system policy will fail.	Requires root access.

     --disable
	      Disable the assessment subsystem. Operations that would be
	      denied by system policy will be allowed to proceed.  Requires
	      root access.

     --status
	      Query whether the assessment subsystem is enabled or disabled.

     In addition, the following options are recognized:


     --continue
	      If the assessment of a file fails, continue assessing additional
	      file arguments.  Without this option, the first failed assess-
	      ment terminates operation.

     --ignore-cache
	      Do not query or use the assessment object cache. This may sig-
	      nificantly slow down operation.  Newly generated assessments may
	      still be stored in the cache.

     --no-cache
	      Do not place the outcome of any assessments into the assessment
	      object cache. No other assessment may reuse this outcome. This
	      option not prohibit the use of existing cache entries.

     --raw    When displaying the outcome of an assessment, write it as a
	      "raw" XML plist instead of parsing it in somewhat more friendly
	      form. This is useful when used in scripts, or to access newly
	      invented assessment aspects that spctl does not yet know about.

     -t, --type
	      Specify which type of assessment is desired: execute to assess
	      code execution, install to assess installation of an installer
	      package, and open to assess the opening of documents. The
	      default is to assess execution.

     -v, --verbose
	      Requests more verbose output. Repeat the option or give it a
	      higher numeric value to increase verbosity.

FILES
     /var/db/SystemPolicy  The system policy database.

DIAGNOSTICS
     spctl exits zero on success, or one if an operation has failed. Exit code
     two indicates unrecognized or unsuitable arguments. If an assessment
     operation results in denial but no other problem has occurred, the exit
     code is three.

SEE ALSO
     syspolicyd(8) codesign(1)

HISTORY
     The system policy facility and spctl command first appeared in Mac OS X
     Lion 10.7.3 as a limited developer preview.

Darwin			       February 22, 2012			Darwin