A code-signed application won't try to modify itself, which is where AppleScript applications can run afoul of the Privacy > Accessibility settings. You don't have to be in a paid developer program to code-sign, although if you aren't using Xcode it would probably be easier to just make the application scripts read-only (remember that properties will not persist when doing this, so you would need to use other means to save preferences, such as NSUserDefaults).
#Mac enable access for assistive devices every time code
Code-signing is just another way to make sure that an application has not been modified, a part of the overall security policy that can also be used to keep your AppleScript application from being modified by the system (like making scripts read-only).įor further information you can take a look at Technical Note TN2206 (macOS Code Signing in Depth) to see the Getekeeper changes. You don't necessarily need to code-sign your own applications, and if you are signing using a self-issued certificate, there isn't a way to verify where the application came from anyway - for that you need a certificate authority such as Apple, who keeps track of the developer certificates it issues. Note that an AppleScript-based application built using Xcode also will not save properties in the application. Regular applications built by using Xcode (such as your iTunes replacement) do not use this method to save preferences, so once it has been given permission to control your computer, reauthorization is not needed.
a helper script replaced with not-so-helpful malware).Īn AppleScript modifies itself in order to provide persistent properties (properties and global variables are saved in the script file), so an unfortunate side effect is that an application will lose the accessibility authorization, since the system will see the modification as a different application. In the latest versions, this has been extended to encapsulating applications even further in order to make sure that resources have not been tampered with (e.g.
Apple has been tightening up the access for scripts over the last few OS versions, for example starting in OS X 10.9 Mavericks, the system-wide “Enable access for assistive devices” setting was replaced with a per-application authorization setting.
0 kommentar(er)
