← Learn
Dangerous
xattr -dr com.apple.quarantine ~/Downloads/Installer.app

macos · bash · Expert

Recursively strips the quarantine attribute macOS attaches to downloaded files. Removing it means Gatekeeper will not check the signature or show the are-you-sure prompt, so an unsigned or tampered app launches as though it came from the App Store.

Signals to notice

  • Disables Gatekeeper verification for the app
  • Applied recursively to a downloaded bundle
  • No signature check performed first

Think you can spot these under time pressure?

Start Training

More macOS