Ah, that explains why. If I use Safari to download a .tar.xz and then use the unxz command line from a self compiled xzutuils, it creates the .tar archive and deletes the original tar.xz file.
This also seems to remove any extended attribute quarantine flags on the .tar itself. So if it is clean being tarred, it will be clean being untarred.
Very interesting to know. So their entire gatekeeper extra attributes approach is really full of BS.
Quote:
Originally Posted by kovidgoyal
If you dont download the dmg using safari, it wont trigger gatekeeper as safari is what sets the attributes of the dmg file that tell gatekeeper that the app was downloaded form the internet and needs to be checked. And ust FYI on newer versions of macOS you can use UFLO rmat for dmg which greatly improves compression.
|