Re: Homebrew Gatekeeper Warning

------=_Part_22866_149073775.1780724697658
Content-Type: multipart/alternative; 
	boundary="----=_Part_22867_1505644182.1780724697658"

------=_Part_22867_1505644182.1780724697658
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

You are running into this issue because on recent versions of macOS,=20
Apple=E2=80=99s Gatekeeper increasingly expects downloaded applications to =
be=20
distributed by an identified developer, code-signed, and ideally notarized;=
=20
Apple=E2=80=99s rationale is malware protection, because signing and notari=
zation=20
give macOS a way to verify the developer identity and check that the app=20
has not been flagged as malicious or tampered with. Homebrew has followed=
=20
suit for its main cask distribution by deprecating, and eventually=20
disabling, casks for apps that do not pass the macOS Gatekeeper check.

None of this is the Unison team's doing.

Unison project does not currently have Apple developer credentials, so=20
/Applications/Unison.app are blocked after download or installation even if=
=20
you trust the source. If you are certain that the copy of Unison came from=
=20
a trustworthy source, you can manually remove macOS=E2=80=99s quarantine ma=
rker=20
with=20

xattr -d com.apple.quarantine /Applications/Unison.app

(If that reports that the attribute was not found, or if nested files=20
inside the app bundle are still quarantined, the broader command xattr -cr=
=20
/Applications/Unison.app recursively clears extended attributes from the=20
whole app bundle; this is more of a blunt instrument, but it is the=20
workaround currently documented by the Unison project.)

I got around this in my Mac UI version by creating a separate Homebrew tap=
=20
repository and recommending installation with brew install --cask=20
bcourbage/tap/unison-ui-mac, which allows distribution outside Homebrew=E2=
=80=99s=20
main cask repository for a non-notarized app and lets the cask build the=20
required xattr quarantine-removal step directly into the install flow.

On Thursday, May 7, 2026 at 8:25:01=E2=80=AFAM UTC-7 "Head Geek (=E4=BC=9F=
=E6=80=9D=E7=A4=BC)" wrote:

> On May 6, 2026, at 17:09, Greg Troxel <[email protected]> wrote:
> > Please also contact apple support and report this as a bug. It's
> > obvious that a computer's owner should be able to decide what to run.
>
> Apple, and apparently the majority of their customers, consider this an=
=20
> anti-malware feature, so it's not going to change. Plus, Apple apparently=
=20
> ignores most of their bug reports.
>
> The computer owner _can_ decide, if he/she knows the "quarantine" trick,=
=20
> but that's of no help to one who depends on homebrew to install something=
=20
> that homebrew no longer offers.
>
> --=20
> Wes Groleau
> =E4=BC=9F=E6=80=9D=E7=A4=BC
>
>

To unsubscribe from this group and stop receiving emails from it, send an e=
mail to [email protected].

------=_Part_22867_1505644182.1780724697658
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

You are running into this issue because on recent versions of macOS, Apple=
=E2=80=99s Gatekeeper increasingly expects downloaded applications to be di=
stributed by an identified developer, code-signed, and ideally notarized; A=
pple=E2=80=99s rationale is malware protection, because signing and notariz=
ation give macOS a way to verify the developer identity and check that the =
app has not been flagged as malicious or tampered with.=C2=A0Homebrew has f=
ollowed suit for its main cask distribution by deprecating, and eventually =
disabling, casks for apps that do not pass the macOS Gatekeeper check.<div>=
<br /></div><div>None of this is the Unison team's doing.<br /><div><br /><=
/div><div>Unison project does not currently have Apple developer credential=
s, so /Applications/Unison.app are blocked after download or installation e=
ven if you trust the source. If you are certain that the copy of Unison cam=
e from a trustworthy source, you can manually remove macOS=E2=80=99s quaran=
tine marker with=C2=A0</div><div><br /></div><div><font face=3D"Courier New=
">xattr -d com.apple.quarantine /Applications/Unison.app</font></div><div><=
br /></div><div>(If that reports that the attribute was not found, or if ne=
sted files inside the app bundle are still quarantined, the broader command=
 <font face=3D"Courier New">xattr -cr /Applications/Unison.app</font> recur=
sively clears extended attributes from the whole app bundle; this is more o=
f a blunt instrument, but it is the workaround currently documented by the =
Unison project.)</div><div><br /></div><div>I got around this in my Mac UI =
version by creating a separate Homebrew tap repository and recommending ins=
tallation with <font face=3D"Courier New">brew install --cask bcourbage/tap=
/unison-ui-mac</font>, which allows distribution outside Homebrew=E2=80=99s=
 main cask repository for a non-notarized app and lets the cask build the r=
equired xattr quarantine-removal step directly into the install flow.<br />=
<br /></div></div><div class=3D"gmail_quote"><div dir=3D"auto" class=3D"gma=
il_attr">On Thursday, May 7, 2026 at 8:25:01=E2=80=AFAM UTC-7 &quot;Head Ge=
ek (=E4=BC=9F=E6=80=9D=E7=A4=BC)&quot; wrote:<br/></div><blockquote class=
=3D"gmail_quote" style=3D"margin: 0 0 0 0.8ex; border-left: 1px solid rgb(2=
04, 204, 204); padding-left: 1ex;">On May 6, 2026, at 17:09, Greg Troxel &l=
t;<a href data-email-masked rel=3D"nofollow">[email protected]</a>&gt; wrote:
<br>&gt; Please also contact apple support and report this as a bug.  It&#3=
9;s
<br>&gt; obvious that a computer&#39;s owner should be able to decide what =
to run.
<br>
<br>Apple, and apparently the majority of their customers, consider this an=
 anti-malware feature, so it&#39;s not going to change.  Plus, Apple appare=
ntly ignores most of their bug reports.
<br>
<br>The computer owner _can_ decide, if he/she knows the &quot;quarantine&q=
uot; trick, but that&#39;s of no help to one who depends on homebrew to ins=
tall something that homebrew no longer offers.
<br>
<br>--=20
<br>Wes Groleau
<br>=E4=BC=9F=E6=80=9D=E7=A4=BC
<br>
<br></blockquote></div>

<p></p>

To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]">unison-u=
[email protected]</a>.<br />

------=_Part_22867_1505644182.1780724697658--

------=_Part_22866_149073775.1780724697658--