Mojave doesn't require notarization (yet) so it is safe to use.

I have now updated the CRAN main page with both the notarized version and the 
regular one. Catalina users must use the notarized version, they have no 
choice, and now Apple enforces hardened runtime for notarized software. The 
notarized version has modified binaries for all its components (including R, 
tcl/tk and texinfo), so there are restrictions on what it can do. It may limit 
interoperability with other libraries and software that is not notarized*.
Please note that R 3.6.2 is the last version on Catalina that uses regular 
runtime, Apple has closed the door so no new releases can use regular runtime 
on Catalina.

Those on earlier versions of macOS are safe and can use the regular version. 
You can install the notarized version, but you don't have to.

Cheers,
Simon

* - so far Apple allows certain exceptions, but without them *all* R packages 
(containing binaries) will have to be signed and potentially notarized. The 
same applies to any libraries used as well, so that will severely limit the 
ability to create custom packages/libraries by the user. We may want to think 
about including code signing into the R package build process (and building R 
for that matter -- currently all signing is done post-hoc).


> On Mar 6, 2020, at 10:26 PM, peter dalgaard <pda...@gmail.com> wrote:
> 
> Installed without issues on Mojave.
> 
> Reminds me that I may need some instructions on any required changes in the 
> toolchain for 4.0.0 if I want to upgrade the build machine to Catalina before 
> the release.
> 
> -pd
> 
>> On 6 Mar 2020, at 02:32 , Simon Urbanek <simon.urba...@r-project.org> wrote:
>> 
>> Lori,
>> 
>> as posted here earlier[1], Apple has tightened notarization requirements 
>> this year making it impossible for current R releases to be notarized until 
>> R 4.0.0 and thus the last Apple-notarized release is R 3.6.2.
>> 
>> If you are on a macOS version that doesn't require notarization, then I have 
>> put a binary that is not notarized in
>> https://mac.R-project.org/bin/macosx/el-capitan/base/R-3.6.3.nn.pkg
>> SHA1(R-3.6.3.nn.pkg)= c462c9b1f9b45d778f05b8d9aa25a9123b3557c4
>> 
>> I am currently investigating if we can enable the required restrictions on 
>> binaries and what implications for the functionality of R that will have and 
>> will keep you posted. 
>> 
>> Cheers,
>> Simon
>> 
>> 
>> [1] - https://stat.ethz.ch/pipermail/r-sig-mac/2019-October/013100.html
>> 
>> 
>>> On 6/03/2020, at 6:39 AM, Shepherd, Lori <lori.sheph...@roswellpark.org> 
>>> wrote:
>>> 
>>> Is there any update on when R 3.6.3 will be available for download from  
>>> https://cloud.r-project.org/bin/macosx/ ?
>>> It seems like there was a release of R 3.6.3 for linux and windows on 
>>> February 29th that is available but nothing yet for Mac.
>>> 
>>> 
>>> 
>>> Lori Shepherd
>>> 
>>> Bioconductor Core Team
>>> 
>>> Roswell Park Comprehensive Cancer Center
>>> 
>>> Department of Biostatistics & Bioinformatics
>>> 
>>> Elm & Carlton Streets
>>> 
>>> Buffalo, New York 14263
>>> 
>>> 
>>> This email message may contain legally privileged and/or confidential 
>>> information.  If you are not the intended recipient(s), or the employee or 
>>> agent responsible for the delivery of this message to the intended 
>>> recipient(s), you are hereby notified that any disclosure, copying, 
>>> distribution, or use of this email message is prohibited.  If you have 
>>> received this message in error, please notify the sender immediately by 
>>> e-mail and delete this email message from your computer. Thank you.
>>>     [[alternative HTML version deleted]]
>>> 
>>> _______________________________________________
>>> R-SIG-Mac mailing list
>>> R-SIG-Mac@r-project.org
>>> https://stat.ethz.ch/mailman/listinfo/r-sig-mac
>>> 
>> 
>> _______________________________________________
>> R-SIG-Mac mailing list
>> R-SIG-Mac@r-project.org
>> https://stat.ethz.ch/mailman/listinfo/r-sig-mac
> 
> -- 
> Peter Dalgaard, Professor,
> Center for Statistics, Copenhagen Business School
> Solbjerg Plads 3, 2000 Frederiksberg, Denmark
> Phone: (+45)38153501
> Office: A 4.23
> Email: pd....@cbs.dk  Priv: pda...@gmail.com
> 
> _______________________________________________
> R-SIG-Mac mailing list
> R-SIG-Mac@r-project.org
> https://stat.ethz.ch/mailman/listinfo/r-sig-mac

_______________________________________________
R-SIG-Mac mailing list
R-SIG-Mac@r-project.org
https://stat.ethz.ch/mailman/listinfo/r-sig-mac

Reply via email to