Mailing List Archive

Saturneric via Gnupg-devel wrote on 19.05.2022 11:34:
> Hi, Is there any way to put GnuPG into a macOS App Bundle? Or has anyone
> already tried it? Especially the macOS App Bundle, when the security
> sandbox mechanism is on, access to executable files or resources outside
> the App Bundle is prohibited.
>
> Also, I am concerned that even if it is possible to wrap gpg into a
> macOS App Bundle, it may need access to some additional resources, which
> is not allowed in the sandbox.

I that it's not possible to put GnuPG into a macOS App Bundle. GnuPG
works with absolute paths for its helper tools and daemons. Even though
the default installation location for Apps on macOS is in /Applications,
a macOS App Bundle may be installed or started from anywhere in the file
system. This collides with the absolute paths of GnuPG.

-Patrick

_______________________________________________
Gnupg-devel mailing list
Gnupg-devel@lists.gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-devel

On Samstag, 21. Mai 2022 10:48:20 CEST Patrick Brunschwig wrote:
> Saturneric via Gnupg-devel wrote on 19.05.2022 11:34:
> > Hi, Is there any way to put GnuPG into a macOS App Bundle? Or has anyone
> > already tried it? Especially the macOS App Bundle, when the security
> > sandbox mechanism is on, access to executable files or resources outside
> > the App Bundle is prohibited.
> >
> > Also, I am concerned that even if it is possible to wrap gpg into a
> > macOS App Bundle, it may need access to some additional resources, which
> > is not allowed in the sandbox.
>
> I that it's not possible to put GnuPG into a macOS App Bundle. GnuPG
> works with absolute paths for its helper tools and daemons. Even though
> the default installation location for Apps on macOS is in /Applications,
> a macOS App Bundle may be installed or started from anywhere in the file
> system. This collides with the absolute paths of GnuPG.

This isn't true anymore. GnuPG works perfectly well as part of an AppImage
which is mounted at a different path on each start. The AppImage uses a
wrapper script to set up the necessary environment variables. For the App
Bundle a similar wrapper script may be needed.

Regards,
Ingo