Hello all,
With Smarter Balanced testing in full-swing, we took another look at the "requirement" to disable Gatekeeper functionality for this application to work. Since SBAC is not a signed application (shame on the developers), the guidance in the SBAC installation guide was to simply turn off the application firewall, namely, "Gatekeeper." Here's what we came up with to avoid blowing a big hole through your OSX security model for this application.
Save the following as a .sh file and run as root/sudo using a privileged account:
#!/bin/sh
#Turn on the application firewall (Gatekeeper)
spctl --master-enable
#Clean up, then find and add an application folder called, "SBAC*" to the Gatekeeper ignore list
find /Applications -name "SBAC*" -type d -maxdepth 1 -exec spctl --remove {} ;
find /Applications -name "SBAC*" -type d -maxdepth 1 -exec spctl --add --label "Smarter Balanced" {} ;
find /Applications -name "SBAC*" -type d -maxdepth 1 -exec spctl -a {} ;
#Also remove the application from the download quarantine (if applicable)
find /Applications -name "SBAC*" -type d -maxdepth 1 -exec xattr -d -r com.apple.quarantine {} ;
exit 0
We hope someone can find benefit from this.
