3 ms·

Notarizing has been mandatory since Catalina: https://developer.apple.com/news/?id=09032019a https://developer.apple.com/news/?id=09032019a

• brundolf 6y ago
  You can bypass it: https://support.apple.com/en-us/HT202491 https://support.apple.com/en-us/HT202491
  • grishka 6y ago
    You can also disable AMFI, the component that enforces signatures and entitlements, altogether, but you have first to disable SIP completely by either booting into Linux of by patching the kernel and then setting the requisite NVRAM variable directly. (`spctl` does not, in fact, disable it completely.)
    • VectorLock 6y ago
      >by either booting into Linux I don't think thats an option on newer MacBook Pros any more.
    • my123 6y ago
      You don't need to do it that way. Boot to macOS Recovery and use csrutil(1) to disable SIP.
      • grishka 6y ago
        Sorry, I mixed up spctl and csrutil. SIP state is stored in an NVRAM variable that is a bitfield of what is allowed. You can't change all bits with csrutil, and you can't set the variable from within macOS, both main and recovery. You have to bypass that mechanism by either patching the macOS kernel to allow setting whatever you want, or booting into an OS that doesn't perform these checks in the first place. And you need to set the bit for IIRC kernel debugging for it to honor the `amfi_get_out_of_my_way` argument.
        • saagarjha 6y ago
          I am not sure if you can flip the bits in the NVRAM variable, but you can disable SIP from recovery mode including the flag for kernel debugging.