MacOS Sequoia -- "Allow Apps from Anywhere" (or GateKeeper) has been modified..

Does anyone know a solution on how to disable Gatekeeper on MacOS 15 Sequoia. Running Mac terminal command: "sudo spctl --master-disable" on MacOS 14 and below would allow me to run any software without issue.


However, in the latest release this seems to be not working and I am receiving this message:

"Globally disabling the assessment system needs to be confirmed in System Settings."


Unfortunately, I cannot find said Assessment System in System Settings. Is this something we need to disable in recovery? Like Disabling SIP?


MacBook Pro 16″, macOS 15.0

Posted on Sep 16, 2024 6:20 PM

Reply
Question marked as Top-ranking reply

Posted on Jan 9, 2025 6:44 AM

81 replies

Oct 18, 2024 12:00 PM in response to bwan1011

So, I figured it out how to allow apps from anywhere. But learned its the order of operations on how to enable this option has changed. @etresoft was correct and you can still enable the setting, but you must do the following.


Follow the order exactly:

  1. Open up System Settings
  2. In System Settings, navigate to "Privacy & Security". Leave Window Open in the Background
  3. Open up Terminal (as separate window). DO NOT CLOSE System Settings
  4. In Terminal, run "sudo spctl --master-disable" --> Type Password --> Click Enter
  5. In System Settings, navigate out of "Privacy & Security" Page (For Example -- Click on "Lockscreen"), then navigate back to "Privacy & Security"
  6. In System Settings --> Privacy & Security Page --> Scroll Down to bottom --> Select "Allow Application From" --> Select "Anywhere" (the option will now appear) --> Type Password
  7. Completed

Oct 18, 2024 12:01 PM in response to ToddToddRoy

So, I figured it out how to allow apps from anywhere. But learned its the order of operations on how to enable this option has changed. @etresoft was correct and you can still enable the setting, but you must do the following.


Follow the order exactly:

  1. Open up System Settings
  2. In System Settings, navigate to "Privacy & Security". Leave Window Open in the Background
  3. Open up Terminal (as separate window). DO NOT CLOSE System Settings
  4. In Terminal, run "sudo spctl --master-disable" --> Type Password --> Click Enter
  5. In System Settings, navigate out of "Privacy & Security" Page (For Example -- Click on "Lockscreen"), then navigate back to "Privacy & Security"
  6. In System Settings --> Privacy & Security Page --> Scroll Down to bottom --> Select "Allow Application From" --> Select "Anywhere" (the option will now appear) --> Type Password
  7. Completed


Nov 5, 2024 6:37 AM in response to ToddToddRoy

This question was answered on page 1 from bwan1011. Tested it myself, worked a treat.


So, I figured it out how to allow apps from anywhere. But learned its the order of operations on how to enable this option has changed. @etresoft was correct and you can still enable the setting, but you must do the following.


Follow the order exactly:

  1. Open up System Settings
  2. In System Settings, navigate to "Privacy & Security". Leave Window Open in the Background
  3. Open up Terminal (as separate window). DO NOT CLOSE System Settings
  4. In Terminal, run "sudo spctl --master-disable" --> Type Password --> Click Enter
  5. In System Settings, navigate out of "Privacy & Security" Page (For Example -- Click on "Lockscreen"), then navigate back to "Privacy & Security"
  6. In System Settings --> Privacy & Security Page --> Scroll Down to bottom --> Select "Allow Application From" --> Select "Anywhere" (the option will now appear) --> Type Password


Nov 13, 2024 11:33 AM in response to bwan1011

There are a number of proposed solutions here, but they're mostly aimed at changing global privileges, which undermines Apple's attempts to protect users. However you can enable specific applications from the terminal under macOS Sequoia by typing:


xattr -d com.apple.quarantine /path/to/app


Usually it's easiest just to drag the app from the Finder window to the command line to get the full path. In my case I wanted to run the Apple Silicon version of Mini vMac, which is in my Applications/Emulators folder.


xattr -d com.apple.quarantine /Applications/Emulators/MiniVMac/Mini\ vMac.app


I found the solution here:


[Edited by Moderator]

Oct 25, 2024 10:27 PM in response to bwan1011

Finally discovered the answer. Hope this helps.


You need to disable both Gatekeeper (enable Anywhere) and SIP(System Integrity Protection).


To disable SIP:

Step 1: Enter macOS recovery mode. Depending on whether your computer is an Intel or ARM chip (M1, M2, M…), there will be different ways to enter recovery.

  • ARM chip: Turn off the device completely, press and hold the power button until the screen displays the words “Loading startup options”, then release the power button.
  • Intel chip: Click the Apple icon on the menu bar, select Restart, then press Command R and hold until the startup screen appears.

Step 2: Open Terminal from the menu bar above. Suppose you do not immediately see this screen when entering recovery. In that case, you may have to go through steps such as selecting Options, selecting User, and entering the password to open the device.

Step 3: Enter this command line into Terminal to disable SIP on Mac. The system may ask for a password to disable SIP; enter your device’s password and then Enter.


csrutil disable


You may be asked by the system, “Allow booting unsigned operating system and any kernel extensions for OS Macintosh HD? [y/n]” , then you need to enter “y” and then Enter to continue.


Step 4: Check the results returned by the system. If you see “Successfully disabled System Integrity Protection” or “System Integrity Protection is off” in Terminal, you have successfully disabled SIP on Mac. Now enter the reboot command and then Enter to reboot the device.

Nov 19, 2024 3:57 PM in response to bwan1011

For those that do not wish to tinker with the terminal, just use Onyx from titanium software...

It is a multifunction utility that has been around since the days of Jaguar and it works with the latest Sequoia.

You can set various "hidden" mac settings, set Finder patameters and so much more but most importantly disable gatekeeper with just one toggle.

I am not affiliated with Onyx in any shape or form, just a happy user since Mac OS X 10.2, so here is the download page:

Onyx


Sep 17, 2024 2:01 PM in response to bwan1011

"Users who want to open unsigned software will now need to go the long way around to do it: first, try to launch the app and dismiss the dialog box telling you that it can't be opened. Then, open Settings, go to the Privacy & Security screen, scroll all the way to the bottom to get to the Security section, and click the Open Anyway button that appears for the last unsigned app you tried to run."


Nov 28, 2024 2:31 PM in response to bwan1011

There’s a safer way to open an app without risking hacks, cracks, malware, or ransomware.


1. Press Shift + click to Open the app.

2. When prompted about possible malware, press Done instead of Send To Trash.

3. Go to System Settings > Privacy and Security.

4. Scroll down and click “Open Anyway” in the window right of the sidebar.

5. Follow the prompts to allow the app to open.


This method is different from before Sequoia 15.1.1. Instead of shift-clicking the app, click Open, then click Open Anyway. This is the same thing, but the “Open Anyway” button is now in System Settings > Privacy and Security.


I called Apple Care for help, and this is what they told me. It worked perfectly.


Remember, if you’re opening an app, ensure the app’s source is trustworthy.


I hope this helps someone out there in cyberspace.

Sep 16, 2024 6:39 PM in response to bwan1011

That command re-enables a throwback to the old way of doing this. Once you're run that command, go to System Settings > Privacy & Security > Security > Allow applications from and change it to "Anywhere". Normally, "Anywhere" is not visible. It was that command that enables it.


Just so you know, you don't need to do that. You can always install anything you want manually without allowing this huge security hole.

Dec 4, 2024 4:57 PM in response to df3t

df3t wrote:

If I "don't want that", please explain how Apple expects me to run my own console apps I have written? I don't want to use the store for my own apps nor am I a "known" developer. FWIW I did the above procedure, enabled allow from anywhere and still it prevents my basic apps from running. Honestly this Macbook Pro is becoming more and more of an expensive paperweight. This isn't about security it's about monopoly. I long for the day Asahi or even Windows runs natively on my hw. I've never had bigger remorse.

Building your own apps is something entirely different.


First of all, remember that the fundamental premise of this entire thread is wrong. It was always wrong. If you look hard enough, you can see my earlier post where I explained it. But I accept that this is 2024 and facts no longer matter. Such is the way of the world. I also accept that Apple has redesigned the forum so that my reply will never be seen. But if you've signed up for e-mail notifications, then you might see my reply.


Gatekeeper is only designed for apps that are downloaded from the internet. If someone is going to publish something for other people to download and run, it is reasonable to expect them to sign their work. It's only $99. Years ago, developers were expected to pay much more than that just to have a development environment.


But if you're building your own apps, then none of this applies - at all. Gatekeeper is not involved in any way. If your basic apps aren't running, then I'm afraid the problem is elsewhere.

Dec 20, 2024 9:57 AM in response to bwan1011

I'll give y'all a far easier way round all this nonsense of typing in commands in terminal and all that nonsense, open privacy and security, in the search box type "open download" or open. It will pop up gatekeeper, click it, then under security you have the option to open and run your file from allow applicationsfrom anywhere. Once done, disable it if youre worried about security! Simples

Jan 20, 2025 1:26 PM in response to Speedbird1

@Speedbird1, you can just go back into System Settings --> Privacy & Security --> Allow Applications From --> Change to one of the 2 options (Anywhere will automatically hide after you close System Settings -- default for Mac is App Store & Known Developers):


In terminal, you can also just run "sudo spctl --master-enable" (Not really needed, just a terminal way to revert back)

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

MacOS Sequoia -- "Allow Apps from Anywhere" (or GateKeeper) has been modified..

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.