Gatekeeper (OS X)
 |
|
Gatekeeper under OS X Yosemite
|
|
| Developer(s) | Apple Inc. |
|---|---|
| Initial release | July 25, 2012 |
| Operating system | OS X |
| Website | {{ |
<templatestyles src="Module:Hatnote/styles.css"></templatestyles>
Gatekeeper is a security feature of the OS X operating system by Apple.[1][2] It allows users to restrict which sources they can install applications from, in order to reduce the likelihood of inadvertently executing malware. It was originally introduced for OS X Mountain Lion and version 10.7.5 of its predecessor Mac OS X Lion.[3] Gatekeeper can also be activated on Lion as of version 10.7.3 via the command-line utility spctl.[4][5] The feature builds upon File Quarantine, which was introduced in Mac OS X Leopard.
Contents
Functions
Users have three options in the security & privacy panel of system preferences:[6]
- Mac App Store: allows only applications downloaded from the Mac App Store to be launched.
- Mac App Store and identified developers: Allows applications downloaded from the Mac App Store and applications signed by certified Apple developers to be launched.[7] This is the default setting in Mountain Lion and later.
- Anywhere: allows all applications to be launched. This is the default setting in Lion.
When the system attempts to open an application that does not meet the chosen option's criteria, the system will refuse to open it and inform the user accordingly. To override Gatekeeper, the user either has to manually switch to a more lenient option (typically requiring an administrator password) or has to open the application from the context menu, although this only works when the second option is chosen. Once an application has passed Gatekeeper, it will be allowed to run normally and won't be verified again.[1]
When Apple identifies an application as malware, it can add the application to the known-malware list and prevent Gatekeeper from accepting it. In addition, Apple can revoke the developer's certificate and prevent the developer from spreading other malicious programs. Applications that are already installed by the user will not be affected.[1]
Implications
The effectiveness of Gatekeeper in combating malware has been acknowledged, but the second option has been met with reservations. Security researcher Chris Miller noted that Gatekeeper will verify the developer certificate and consult the known-malware list only when the application is first opened. Malware that already passed Gatekeeper will not be stopped. In addition, Gatekeeper will only verify applications that have been downloaded from the Internet, but not from other sources like USB flash drives.[8] Questions have also been raised about the registration process to acquire a developer certificate and the prospect of certificate theft.[9]
See also
References
- ↑ 1.0 1.1 1.2 Lua error in package.lua at line 80: module 'strict' not found.
- ↑ Lua error in package.lua at line 80: module 'strict' not found.
- ↑ Lua error in package.lua at line 80: module 'strict' not found.
- ↑ Lua error in package.lua at line 80: module 'strict' not found.
- ↑ Lua error in package.lua at line 80: module 'strict' not found.
- ↑ Lua error in package.lua at line 80: module 'strict' not found.
- ↑ Lua error in package.lua at line 80: module 'strict' not found.
- ↑ Lua error in package.lua at line 80: module 'strict' not found.
- ↑ Lua error in package.lua at line 80: module 'strict' not found.
