Vassal under Apple Catalina

You can run this command: man xattr to view documentation for the xattr command (or read the same information here: ss64.com/osx/xattr.html )

When you download a file with your browser, it writes additional attributes to the file to mark it as coming from an untrusted source. Running xattr with just a filename will print any attributes out:

$ xattr ~/Downloads/VASSAL-3.3.0-svn9280-macosx.dmg com.apple.diskimages.recentcksum com.apple.macl com.apple.metadata:kMDItemWhereFroms com.apple.quarantine

The quarantine attribute at the end is the only attribute that persists when Vassal.app is copied from the disk image. Deleting the attribute makes the system behave as if the file was obtained “safely”, so it does not prevent it from running or accessing your personal files. You can search for “com.apple.quarantine” to find a bit more information on it.

It’s good to be cautious, as you would be bypassing some of the safeguards meant to protect users from malicious apps (bypassing for Vassal only, not for the whole system!) Hopefully this info can help you make a decision you are comfortable with.

TYVM but I’m completely lost! Where am I suppose to read or find or write those lines?
Really sorry but I know nothing about the creation of computer programs.
Regards - GG

Oh, sorry - start by running Terminal.app. You can do this with spotlight:

  1. Press cmd+space on the keyboard
  2. type ‘terminal’ into the search box - by the time you type ‘m’ you will likely see Terminal.app as the first result or somewhere near the top.
  3. double click the app, or press enter to launch it if it’s already the top result.

You should get a window on the screen, probably white with a small amount of black text on it. This is where you can enter the xattr command.

The easiest way to run an application blocked by OS X is still to go to System Preferences… Security and you should see a message saying that VASSAL was blocked. Click the Run Anyway or whatever the button is called (not at a Mac at the moment) and OS X will do all the work for you.

Thus spake zgrose via messages:

The easiest way to run an application blocked by OS X is still to go to
System Preferences… Security and you should see a message saying that
VASSAL was blocked. Click the Run Anyway or whatever the button is
called (not at a Mac at the moment) and OS X will do all the work for
you.

What do we need to do so that this isn’t necessary?


J.

This is no different to simply using the right-click > open command. It allows the app to run, but does not remove the quarantine attribute, and will still run afoul of this issue on Catalina.

The app needs to be signed and notarised using an Apple developer account. I don’t remember if this requires the $99 fee.

Arg: Can’t find the “Terminal.app” in spotlight?

That’s odd! It should be under /Applications/Utilities if you want to find it manually.

Is that here?

Yes, that’s it.

So I must hit “sudo xattr -d -r com.apple.quarantine /Applications/VASSAL.app” on the white screen after “GG$”?

(it sound like chinese for me loool)

You’ve got it. It does look a bit complicated, but all you’re doing is running a program with some extra information about what you want it to do:

xattr - a program to manage extended attributes
-d - delete an attribute
-r - do the delete on all files and folders within the target folder
com.apple.quarantine - the name of the attribute to delete
/Applications/VASSAL.app - the target folder for the command

If this was meant to be a long-term solution, I’d suggest adding it to the main Vassal script, but I’m hoping a better solution will be found.

With so many thanks Malnorma.

I hope you will excuse me but I finally decided not to enter those lines on this computer of mine that is also my main working tool as a photographer. I will play a little less on Vassal (because of the repetitive manipulations) and wait for a fixing of Vassal for the (poor) people owning a Mac.

With best regards - GG

By the way I’m Guillaume Gleize - City of Tours - France
Command & Colors Napoleonic player on Vassal & Live

You do not need to use the Terminal.

When you double-click VASSAL (or any other un-signed app that you trust), you will see:
[attachment=2]Screen Shot 2019-10-23 at 8.38.08 AM.png[/attachment]

Just click Cancel. Then goto the Apple menu… System Preferences… Security & Privacy. You will see:
[attachment=1]Screen Shot 2019-10-23 at 8.38.16 AM.png[/attachment]

Click Open Anyway if you trust it and you will see:
[attachment=0]Screen Shot 2019-10-23 at 8.38.23 AM.png[/attachment]

Click Open and you’re good-to-go.

Again, this is a process you will have to use when opening apps from smaller development houses.

That appears to be Option+Open on the Right-Click menu.

Tell me more about how I can see what will run afoul. So far Option-Open just seems to be a shortcut to the process and allows VASSAL to run just fine.

No problem. Another thought occurred to me - you could try storing all your modules under /Users/Shared instead of your home folder. I believe that location will be less strictly protected, but I do not have time to test it right now.

Please read the thread. Launching Vassal is not the issue.

Last info: It seems to depend on TIME very much.

If I shut down and re-open my computer many times during the first hours: The modules are still here. But After let say 8 hours or more: If I shut down and re-open my computer: The modules (and extensions) have disappeared again.
Sooo strange …

Yes, it’s like the OS is granting a temporary exception that expires, often after a reboot. I set up a test yesterday with three vmods under /Users/Shared, one in my Downloads folder, and one in my Documents folder. This morning, the Shared vmods are still listed, but the other two have been dropped.

Have you tried moving your modules to /Users/Shared?

Not sure if it is relevant, but from Apple’s website, here are some of the
new Catalina “features”: apple.com/macos/catalina/features/

Enhanced GatekeeperGatekeeper will ensure that all new apps you install —
from the App Store or the internet — have been checked for known security
issues by Apple before you run them the first time and periodically
thereafter. This extends the protection from the app’s source to include
automated checks for what’s in the app.

Data protectionsmacOS Catalina checks with you before allowing an app to
access your data in your Documents, Desktop, and Downloads folders; iCloud
Drive; the folders of third-party cloud storage providers; removable media;
and external volumes. In addition, you’re asked before an app can perform
key logging or capture a still or video recording of your screen.

On Thu, Oct 24, 2019 at 12:06 PM Malnorma malnormacxio@gmail.com wrote:

“GGdeTOURS” wrote:

Last info: It seems to depend on TIME very much.

If I shut down and re-open my computer many times during the first
hours: The modules are still here. But After let say 8 hours or more:
If I shut down and re-open my computer: The modules (and extensions)
have disappeared again.
Sooo strange …

Yes, it’s like the OS is granting a temporary exception that expires,
often after a reboot. I set up a test yesterday with three vmods under
/Users/Shared, one in my Downloads folder, and one in my Documents
folder. This morning, the Shared vmods are still listed, but the other
two have been dropped.

Have you tried moving your modules to /Users/Shared?


Read this topic online here:
Vassal under Apple Catalina - #29 by Malnorma


messages mailing list
messages@vassalengine.org
vassalengine.org/mailman/listinfo/messages

And from digitaltrends.com/computing … -problems/
How to fix MacOS Catalina file access problems

As part of Catalina’s security overhaul, Apple had changed how apps are
able to access your files. Like on an iPhone, when you open a newly
downloaded app, Catalina may launch a popup asking you to grant permission
to that app to access specific files or folders. If you denied access and
change your mind, you can do so by opening up your Mac’s System Preferences
app in the dock.

Next, you’ll choose Security and Privacy, and you’ll want to click on Files
and Folders
in the left pane. On the right pane, you’ll find a list of
apps along with their file access privileges, and you can click on the
individual apps to make your changes.

After you’re done granting or revoking file access privileges, be sure to
restart the app for the changes to take effect.

On Thu, Oct 24, 2019 at 2:38 PM Tom Russ taruss2000@gmail.com wrote:

Not sure if it is relevant, but from Apple’s website, here are some of the
new Catalina “features”: apple.com/macos/catalina/features/

Enhanced GatekeeperGatekeeper will ensure that all new apps you install —
from the App Store or the internet — have been checked for known security
issues by Apple before you run them the first time and periodically
thereafter. This extends the protection from the app’s source to include
automated checks for what’s in the app.

Data protectionsmacOS Catalina checks with you before allowing an app to
access your data in your Documents, Desktop, and Downloads folders; iCloud
Drive; the folders of third-party cloud storage providers; removable media;
and external volumes. In addition, you’re asked before an app can perform
key logging or capture a still or video recording of your screen.

On Thu, Oct 24, 2019 at 12:06 PM Malnorma malnormacxio@gmail.com wrote:

“GGdeTOURS” wrote:

Last info: It seems to depend on TIME very much.

If I shut down and re-open my computer many times during the first
hours: The modules are still here. But After let say 8 hours or more:
If I shut down and re-open my computer: The modules (and extensions)
have disappeared again.
Sooo strange …

Yes, it’s like the OS is granting a temporary exception that expires,
often after a reboot. I set up a test yesterday with three vmods under
/Users/Shared, one in my Downloads folder, and one in my Documents
folder. This morning, the Shared vmods are still listed, but the other
two have been dropped.

Have you tried moving your modules to /Users/Shared?


Read this topic online here:
Vassal under Apple Catalina - #29 by Malnorma


messages mailing list
messages@vassalengine.org
vassalengine.org/mailman/listinfo/messages