Bug 408343 - File path sandboxing issue in our dmg's
Summary: File path sandboxing issue in our dmg's
Status: RESOLVED FIXED
Alias: None
Product: krita
Classification: Applications
Component: General (other bugs)
Version First Reported In: git master (please specify the git hash!)
Platform: macOS (DMG) macOS
: NOR normal
Target Milestone: ---
Assignee: vanyossi
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-06-05 12:45 UTC by Halla Rempt
Modified: 2019-06-05 17:20 UTC (History)
1 user (show)

See Also:
Latest Commit: https://invent.kde.org/kde/krita/commit/81fdaf79f956b369e8ecb45b20be5495fd747351
Version Fixed/Implemented In:
Sentry Crash Report:

Attachments
Add an attachment

Note You need to log in before you can comment on or make changes to this bug.
Description Halla Rempt 2019-06-05 12:45:27 UTC 
The 4.2.0 and 4.2.1 dmg's trigger gatekeeper in High Sierra:

14:41:22 < amyspark> Got it, it's a file path sandboxing issue
14:41:43 < amyspark> File 
                     /Applications/krita.app/Contents/Frameworks/Python.framework/Versions/3.5/bin/python3.5m 
                     failed on loadCmd /Users/boud/dev/ivanbuild/i/lib/Python.framework/Versions/3.5/Python
14:41:52 < amyspark> there's a stray rpath somewhere
Comment 1 Halla Rempt 2019-06-05 12:45:55 UTC 
Ivan, can you take a look please? If at all possible, I'd like to have a new dmg tomorrow morning, CEST.
Comment 2 amyspark 2019-06-05 13:09:14 UTC 
Ivan, a simple check for this is going to the krita.app directory, issuing

find . -perm -111 -type f | xargs otool -L | less

and then searching for "/Users", "boud", or "ivanbuild". Affected files are:

./Contents/Frameworks/Python.framework/Versions/3.5/bin/python3.5m
./Contents/Frameworks/Python.framework/Versions/3.5/bin/python3.5
./Contents/Frameworks/Python.framework/Versions/3.5/Resources/Python.app/Contents/MacOS/Python
Comment 3 vanyossi 2019-06-05 17:20:06 UTC 
Git commit 81fdaf79f956b369e8ecb45b20be5495fd747351 by Ivan Yossi.
Committed on 05/06/2019 at 16:40.
Pushed by ivany into branch 'master'.

packaging macOS: properly find all hard coded rpaths

M  +14   -18   packaging/macos/osxdeploy.sh

https://invent.kde.org/kde/krita/commit/81fdaf79f956b369e8ecb45b20be5495fd747351