On 4/30/2015 12:27 AM, Dave Botsch wrote:
> I've been looking at signing Mac pkgs to make Gatekeeper happy (at least
> for the "install" step). It looks like, as of 10.9.5 and up, Apple
> purposely disallows acceptance of a signed "bundle" PKG, which would
> appear to be what the current PKG is. One must instead create a so
> called "flat" pkg, which means using the newer pkgbuild tool
> (supposedly, packagemaker with a 10.5 target will do this as well, but,
> well, it doesn't, probably due to the additional scripts). For the most
> part, the flat pkg would appear to be able to use the same input as the
> current "bundle" pkg. But, the scripts that are allowed are different.
> So, that has to be worked around. And, whether or not the cell config
> plugin is allowed as well is unclear.
> 
> So, has anyone looked at converting from packagemaker to pkgbuild and a
> flat pkg? 

The packages that Your File System, Inc. distribute for OSX Yosemite and
Mavericks are flat packages.   They include a signed kernel extension,
signed binaries, and a signed package.   You can download packages from

  https://www.your-file-system.com/openafs-client-installer/download

Technical support for these packages is available from Your File System,
Inc. as part of a support contract

Jeffrey Altman


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to