MacOS Sequoia -- "Allow Apps from Anywhere" (or GateKeeper) has been modified..

Does anyone know a solution on how to disable Gatekeeper on MacOS 15 Sequoia. Running Mac terminal command: "sudo spctl --master-disable" on MacOS 14 and below would allow me to run any software without issue.


However, in the latest release this seems to be not working and I am receiving this message:

"Globally disabling the assessment system needs to be confirmed in System Settings."


Unfortunately, I cannot find said Assessment System in System Settings. Is this something we need to disable in recovery? Like Disabling SIP?


MacBook Pro 16″, macOS 15.0

Posted on Sep 16, 2024 6:20 PM

Reply
Question marked as Top-ranking reply

Posted on Oct 18, 2024 12:00 PM

So, I figured it out how to allow apps from anywhere. But learned its the order of operations on how to enable this option has changed. @etresoft was correct and you can still enable the setting, but you must do the following.


Follow the order exactly:

  1. Open up System Settings
  2. In System Settings, navigate to "Privacy & Security". Leave Window Open in the Background
  3. Open up Terminal (as separate window). DO NOT CLOSE System Settings
  4. In Terminal, run "sudo spctl --master-disable" --> Type Password --> Click Enter
  5. In System Settings, navigate out of "Privacy & Security" Page (For Example -- Click on "Lockscreen"), then navigate back to "Privacy & Security"
  6. In System Settings --> Privacy & Security Page --> Scroll Down to bottom --> Select "Allow Application From" --> Select "Anywhere" (the option will now appear) --> Type Password
  7. Completed
81 replies
Question marked as Top-ranking reply

Oct 18, 2024 12:00 PM in response to bwan1011

So, I figured it out how to allow apps from anywhere. But learned its the order of operations on how to enable this option has changed. @etresoft was correct and you can still enable the setting, but you must do the following.


Follow the order exactly:

  1. Open up System Settings
  2. In System Settings, navigate to "Privacy & Security". Leave Window Open in the Background
  3. Open up Terminal (as separate window). DO NOT CLOSE System Settings
  4. In Terminal, run "sudo spctl --master-disable" --> Type Password --> Click Enter
  5. In System Settings, navigate out of "Privacy & Security" Page (For Example -- Click on "Lockscreen"), then navigate back to "Privacy & Security"
  6. In System Settings --> Privacy & Security Page --> Scroll Down to bottom --> Select "Allow Application From" --> Select "Anywhere" (the option will now appear) --> Type Password
  7. Completed

Oct 18, 2024 12:01 PM in response to ToddToddRoy

So, I figured it out how to allow apps from anywhere. But learned its the order of operations on how to enable this option has changed. @etresoft was correct and you can still enable the setting, but you must do the following.


Follow the order exactly:

  1. Open up System Settings
  2. In System Settings, navigate to "Privacy & Security". Leave Window Open in the Background
  3. Open up Terminal (as separate window). DO NOT CLOSE System Settings
  4. In Terminal, run "sudo spctl --master-disable" --> Type Password --> Click Enter
  5. In System Settings, navigate out of "Privacy & Security" Page (For Example -- Click on "Lockscreen"), then navigate back to "Privacy & Security"
  6. In System Settings --> Privacy & Security Page --> Scroll Down to bottom --> Select "Allow Application From" --> Select "Anywhere" (the option will now appear) --> Type Password
  7. Completed


Oct 25, 2024 10:27 PM in response to bwan1011

Finally discovered the answer. Hope this helps.


You need to disable both Gatekeeper (enable Anywhere) and SIP(System Integrity Protection).


To disable SIP:

Step 1: Enter macOS recovery mode. Depending on whether your computer is an Intel or ARM chip (M1, M2, M…), there will be different ways to enter recovery.

  • ARM chip: Turn off the device completely, press and hold the power button until the screen displays the words “Loading startup options”, then release the power button.
  • Intel chip: Click the Apple icon on the menu bar, select Restart, then press Command R and hold until the startup screen appears.

Step 2: Open Terminal from the menu bar above. Suppose you do not immediately see this screen when entering recovery. In that case, you may have to go through steps such as selecting Options, selecting User, and entering the password to open the device.

Step 3: Enter this command line into Terminal to disable SIP on Mac. The system may ask for a password to disable SIP; enter your device’s password and then Enter.


csrutil disable


You may be asked by the system, “Allow booting unsigned operating system and any kernel extensions for OS Macintosh HD? [y/n]” , then you need to enter “y” and then Enter to continue.


Step 4: Check the results returned by the system. If you see “Successfully disabled System Integrity Protection” or “System Integrity Protection is off” in Terminal, you have successfully disabled SIP on Mac. Now enter the reboot command and then Enter to reboot the device.

Nov 5, 2024 6:37 AM in response to ToddToddRoy

This question was answered on page 1 from bwan1011. Tested it myself, worked a treat.


So, I figured it out how to allow apps from anywhere. But learned its the order of operations on how to enable this option has changed. @etresoft was correct and you can still enable the setting, but you must do the following.


Follow the order exactly:

  1. Open up System Settings
  2. In System Settings, navigate to "Privacy & Security". Leave Window Open in the Background
  3. Open up Terminal (as separate window). DO NOT CLOSE System Settings
  4. In Terminal, run "sudo spctl --master-disable" --> Type Password --> Click Enter
  5. In System Settings, navigate out of "Privacy & Security" Page (For Example -- Click on "Lockscreen"), then navigate back to "Privacy & Security"
  6. In System Settings --> Privacy & Security Page --> Scroll Down to bottom --> Select "Allow Application From" --> Select "Anywhere" (the option will now appear) --> Type Password


Nov 13, 2024 11:33 AM in response to bwan1011

There are a number of proposed solutions here, but they're mostly aimed at changing global privileges, which undermines Apple's attempts to protect users. However you can enable specific applications from the terminal under macOS Sequoia by typing:


xattr -d com.apple.quarantine /path/to/app


Usually it's easiest just to drag the app from the Finder window to the command line to get the full path. In my case I wanted to run the Apple Silicon version of Mini vMac, which is in my Applications/Emulators folder.


xattr -d com.apple.quarantine /Applications/Emulators/MiniVMac/Mini\ vMac.app


I found the solution here:


[Edited by Moderator]

Sep 16, 2024 6:39 PM in response to bwan1011

That command re-enables a throwback to the old way of doing this. Once you're run that command, go to System Settings > Privacy & Security > Security > Allow applications from and change it to "Anywhere". Normally, "Anywhere" is not visible. It was that command that enables it.


Just so you know, you don't need to do that. You can always install anything you want manually without allowing this huge security hole.

Sep 16, 2024 7:10 PM in response to etresoft

Thank you for your reply, however I am having issues running installed Software from Homebrew without being able to "Anywhere" visible. I keep getting an unidentified developer pop-up and the old solution was able to option+click or go into System settings/allow the single app execution. But, allowing Apps Anywhere means I never had to do this. But thank you for brining up the security argument, but I'd still like to take matters into my own hands with this topic.

Apple has seemed to changed in the newest Sequoia release that doesn't allow that command to operate anymore. Do you have any potential insight on how to remedy it? And yes, the options for "Anywhere" is hidden until I used to run that command. However, it is no longer an option to unhide it

Sep 17, 2024 12:53 PM in response to etresoft

It's MacOS 15 that is limiting me from running NOT buggy software like rar, unrar, etc.


What I am asking is that "sudo spctl --master-disable" no longer works as intended & doesn't allows apps from "Anywhere" in MacOS 15 Sequoia.

So now I must navigate to System Settings to allow a single app/terminal executable to run every time.


What is the new way in MacOS 15+ to allow enable/unhide the setting "Anywhere" in System Settings -> Privacy/Security? So I don't need to manually enter system settings every time I download "unverified" software.

Sep 17, 2024 1:01 PM in response to bwan1011

bwan1011 wrote:

It's MacOS 15 that is limiting me from running NOT buggy software like rar, unrar, etc.

Odd that you didn't include homebrew in the list of "NOT buggy software."

Just build them like any other unix software.


So now I must navigate to System Settings to allow a single app/terminal executable to run everytime.

You should only have to do it once.

Sep 17, 2024 1:55 PM in response to Barney-15E

I wish I can go back and edit :D.

I guess I'm not a fan of being limited what I can run on my computer that I've purchased. Needing to do these little work-arounds aren't ideal. I'm sure there is a way to allow this setting to appear so I don't have to continuously enable extra software that is "validated" by Apple. If anyone else has a solution bring this back in the new MacOS 15. Please feel free to weigh in to the conversation.

Sep 17, 2024 2:01 PM in response to bwan1011

"Users who want to open unsigned software will now need to go the long way around to do it: first, try to launch the app and dismiss the dialog box telling you that it can't be opened. Then, open Settings, go to the Privacy & Security screen, scroll all the way to the bottom to get to the Security section, and click the Open Anyway button that appears for the last unsigned app you tried to run."


Sep 17, 2024 4:59 PM in response to bwan1011

bwan1011 wrote:

It's MacOS 15 that is limiting me from running NOT buggy software like rar, unrar, etc.

I never said rar and unrar were buggy. I said Homebrew was buggy.

What I am asking is that "sudo spctl --master-disable" no longer works as intended & doesn't allows apps from "Anywhere" in MacOS 15 Sequoia.

So now I must navigate to System Settings to allow a single app/terminal executable to run every time.

What is the new way in MacOS 15+ to allow enable/unhide the setting "Anywhere" in System Settings -> Privacy/Security? So I don't need to manually enter system settings every time I download "unverified" software.

I have no idea what you're talking about. Maybe review my previous posts.



Sep 25, 2024 7:55 PM in response to Barney-15E

In the begining it was Cursor, since I recently installed it and it connected all the .json files by default, meanwhile opening Cursor itself from Launchpad was just fine. Then I right clicked on the json file and tried to open it in Sublime Text, the GateKeeper still prevented me from opening it.


Well now I can open it, but I don't really know what I did worked...

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

MacOS Sequoia -- "Allow Apps from Anywhere" (or GateKeeper) has been modified..

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.