Apple Gatekeeper

E771045

Apple Gatekeeper is a macOS security feature that verifies and controls the execution of apps to protect users from running untrusted or malicious software.

All labels observed (4)

How this entity was disambiguated

Statements (48)

Predicate Object
instanceOf application execution control mechanism
macOS security feature
blocks apps from unidentified developers by default
apps that fail code signing validation
apps that fail notarization checks
canBeBypassedBy Control-click open and user confirmation
explicit user override in System Settings
category malware protection
security
checks quarantine attribute on downloaded files
whether an app is from an identified developer
whether an app is from the Mac App Store
whether an app is notarized by Apple
configurableVia System Preferences
System Settings
spctl command-line tool
defaultState enabled
developedBy Apple Inc.
enforces Apple Developer ID program requirements
notarization requirements for distributed software
implementedIn macOS security subsystem
introducedIn OS X Mountain Lion
introducedInVersion OS X 10.8
linked to: OS X Mountain Lion
operatingSystem macOS
platform Mac
purpose control execution of downloaded apps
enforce code signing requirements
protect users from running untrusted software
reduce risk of malware infections
relatedTo Apple Developer Program
Mac App Store
linked to: App Store
releaseYear 2012
requires valid Apple Developer ID certificate for identified developers
riskMitigated drive-by downloads and common macOS malware
execution of unsigned apps from unknown sources
scope apps downloaded from the internet
first launch of apps
settingOption Allow apps from App Store
Allow apps from App Store and identified developers
uses Gatekeeper policy database
code signing
notarization tickets
verifies app code signatures
developer ID certificates
notarization status of apps
worksWith Apple notarization service
linked to: Apple Gatekeeper

System Integrity Protection
XProtect

How these facts were elicited

Referenced by (5)

Full triples — surface form annotated when it differs from this entity's canonical label.

Apple Developer ID certificate requiredBy Apple Gatekeeper
subject linked to: Apple Developer ID certificates
Apple Developer ID certificate validatedBy Apple Gatekeeper
subject linked to: Apple Developer ID certificates
Apple Worldwide Developers Conference 2012 introducedFeature Gatekeeper in OS X Mountain Lion
linked to: Apple Gatekeeper
Apple Gatekeeper worksWith Apple notarization service
linked to: Apple Gatekeeper
XProtect feature integrates with Gatekeeper
linked to: Apple Gatekeeper