You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

MacOS Sequoia -- "Allow Apps from Anywhere" (or GateKeeper) has been modified..

Does anyone know a solution on how to disable Gatekeeper on MacOS 15 Sequoia. Running Mac terminal command: "sudo spctl --master-disable" on MacOS 14 and below would allow me to run any software without issue.


However, in the latest release this seems to be not working and I am receiving this message:

"Globally disabling the assessment system needs to be confirmed in System Settings."


Unfortunately, I cannot find said Assessment System in System Settings. Is this something we need to disable in recovery? Like Disabling SIP?


MacBook Pro 16″, macOS 15.0

Posted on Sep 16, 2024 6:20 PM

Reply
Question marked as Top-ranking reply

Posted on Oct 18, 2024 12:00 PM

So, I figured it out how to allow apps from anywhere. But learned its the order of operations on how to enable this option has changed. @etresoft was correct and you can still enable the setting, but you must do the following.


Follow the order exactly:

  1. Open up System Settings
  2. In System Settings, navigate to "Privacy & Security". Leave Window Open in the Background
  3. Open up Terminal (as separate window). DO NOT CLOSE System Settings
  4. In Terminal, run "sudo spctl --master-disable" --> Type Password --> Click Enter
  5. In System Settings, navigate out of "Privacy & Security" Page (For Example -- Click on "Lockscreen"), then navigate back to "Privacy & Security"
  6. In System Settings --> Privacy & Security Page --> Scroll Down to bottom --> Select "Allow Application From" --> Select "Anywhere" (the option will now appear) --> Type Password
  7. Completed
23 replies
Question marked as Top-ranking reply

Oct 18, 2024 12:00 PM in response to bwan1011

So, I figured it out how to allow apps from anywhere. But learned its the order of operations on how to enable this option has changed. @etresoft was correct and you can still enable the setting, but you must do the following.


Follow the order exactly:

  1. Open up System Settings
  2. In System Settings, navigate to "Privacy & Security". Leave Window Open in the Background
  3. Open up Terminal (as separate window). DO NOT CLOSE System Settings
  4. In Terminal, run "sudo spctl --master-disable" --> Type Password --> Click Enter
  5. In System Settings, navigate out of "Privacy & Security" Page (For Example -- Click on "Lockscreen"), then navigate back to "Privacy & Security"
  6. In System Settings --> Privacy & Security Page --> Scroll Down to bottom --> Select "Allow Application From" --> Select "Anywhere" (the option will now appear) --> Type Password
  7. Completed

Sep 16, 2024 6:39 PM in response to bwan1011

That command re-enables a throwback to the old way of doing this. Once you're run that command, go to System Settings > Privacy & Security > Security > Allow applications from and change it to "Anywhere". Normally, "Anywhere" is not visible. It was that command that enables it.


Just so you know, you don't need to do that. You can always install anything you want manually without allowing this huge security hole.

Oct 18, 2024 12:01 PM in response to ToddToddRoy

So, I figured it out how to allow apps from anywhere. But learned its the order of operations on how to enable this option has changed. @etresoft was correct and you can still enable the setting, but you must do the following.


Follow the order exactly:

  1. Open up System Settings
  2. In System Settings, navigate to "Privacy & Security". Leave Window Open in the Background
  3. Open up Terminal (as separate window). DO NOT CLOSE System Settings
  4. In Terminal, run "sudo spctl --master-disable" --> Type Password --> Click Enter
  5. In System Settings, navigate out of "Privacy & Security" Page (For Example -- Click on "Lockscreen"), then navigate back to "Privacy & Security"
  6. In System Settings --> Privacy & Security Page --> Scroll Down to bottom --> Select "Allow Application From" --> Select "Anywhere" (the option will now appear) --> Type Password
  7. Completed


Sep 17, 2024 12:53 PM in response to etresoft

It's MacOS 15 that is limiting me from running NOT buggy software like rar, unrar, etc.


What I am asking is that "sudo spctl --master-disable" no longer works as intended & doesn't allows apps from "Anywhere" in MacOS 15 Sequoia.

So now I must navigate to System Settings to allow a single app/terminal executable to run every time.


What is the new way in MacOS 15+ to allow enable/unhide the setting "Anywhere" in System Settings -> Privacy/Security? So I don't need to manually enter system settings every time I download "unverified" software.

Sep 17, 2024 4:59 PM in response to bwan1011

bwan1011 wrote:

It's MacOS 15 that is limiting me from running NOT buggy software like rar, unrar, etc.

I never said rar and unrar were buggy. I said Homebrew was buggy.

What I am asking is that "sudo spctl --master-disable" no longer works as intended & doesn't allows apps from "Anywhere" in MacOS 15 Sequoia.

So now I must navigate to System Settings to allow a single app/terminal executable to run every time.

What is the new way in MacOS 15+ to allow enable/unhide the setting "Anywhere" in System Settings -> Privacy/Security? So I don't need to manually enter system settings every time I download "unverified" software.

I have no idea what you're talking about. Maybe review my previous posts.



Sep 17, 2024 1:55 PM in response to Barney-15E

I wish I can go back and edit :D.

I guess I'm not a fan of being limited what I can run on my computer that I've purchased. Needing to do these little work-arounds aren't ideal. I'm sure there is a way to allow this setting to appear so I don't have to continuously enable extra software that is "validated" by Apple. If anyone else has a solution bring this back in the new MacOS 15. Please feel free to weigh in to the conversation.

Sep 17, 2024 2:01 PM in response to bwan1011

"Users who want to open unsigned software will now need to go the long way around to do it: first, try to launch the app and dismiss the dialog box telling you that it can't be opened. Then, open Settings, go to the Privacy & Security screen, scroll all the way to the bottom to get to the Security section, and click the Open Anyway button that appears for the last unsigned app you tried to run."


Sep 16, 2024 7:10 PM in response to etresoft

Thank you for your reply, however I am having issues running installed Software from Homebrew without being able to "Anywhere" visible. I keep getting an unidentified developer pop-up and the old solution was able to option+click or go into System settings/allow the single app execution. But, allowing Apps Anywhere means I never had to do this. But thank you for brining up the security argument, but I'd still like to take matters into my own hands with this topic.

Apple has seemed to changed in the newest Sequoia release that doesn't allow that command to operate anymore. Do you have any potential insight on how to remedy it? And yes, the options for "Anywhere" is hidden until I used to run that command. However, it is no longer an option to unhide it

Oct 25, 2024 10:27 PM in response to bwan1011

Finally discovered the answer. Hope this helps.


You need to disable both Gatekeeper (enable Anywhere) and SIP(System Integrity Protection).


To disable SIP:

Step 1: Enter macOS recovery mode. Depending on whether your computer is an Intel or ARM chip (M1, M2, M…), there will be different ways to enter recovery.

  • ARM chip: Turn off the device completely, press and hold the power button until the screen displays the words “Loading startup options”, then release the power button.
  • Intel chip: Click the Apple icon on the menu bar, select Restart, then press Command R and hold until the startup screen appears.

Step 2: Open Terminal from the menu bar above. Suppose you do not immediately see this screen when entering recovery. In that case, you may have to go through steps such as selecting Options, selecting User, and entering the password to open the device.

Step 3: Enter this command line into Terminal to disable SIP on Mac. The system may ask for a password to disable SIP; enter your device’s password and then Enter.


csrutil disable


You may be asked by the system, “Allow booting unsigned operating system and any kernel extensions for OS Macintosh HD? [y/n]” , then you need to enter “y” and then Enter to continue.


Step 4: Check the results returned by the system. If you see “Successfully disabled System Integrity Protection” or “System Integrity Protection is off” in Terminal, you have successfully disabled SIP on Mac. Now enter the reboot command and then Enter to reboot the device.

Nov 5, 2024 6:37 AM in response to ToddToddRoy

This question was answered on page 1 from bwan1011. Tested it myself, worked a treat.


So, I figured it out how to allow apps from anywhere. But learned its the order of operations on how to enable this option has changed. @etresoft was correct and you can still enable the setting, but you must do the following.


Follow the order exactly:

  1. Open up System Settings
  2. In System Settings, navigate to "Privacy & Security". Leave Window Open in the Background
  3. Open up Terminal (as separate window). DO NOT CLOSE System Settings
  4. In Terminal, run "sudo spctl --master-disable" --> Type Password --> Click Enter
  5. In System Settings, navigate out of "Privacy & Security" Page (For Example -- Click on "Lockscreen"), then navigate back to "Privacy & Security"
  6. In System Settings --> Privacy & Security Page --> Scroll Down to bottom --> Select "Allow Application From" --> Select "Anywhere" (the option will now appear) --> Type Password


MacOS Sequoia -- "Allow Apps from Anywhere" (or GateKeeper) has been modified..

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.