Skip to content

Code signature validation failure on Homebrew installed app #1108

@kinghuang

Description

@kinghuang

What happened?

I installed TablePro via homebrew. The installed app fails to launch.

Steps to reproduce

Install TablePro using homebrew.

~ brew install --cask tablepro
==> Auto-updating Homebrew...
==> Auto-updated Homebrew!
Updated 5 taps (slingdata-io/sling, hashicorp/tap, treeverse/lakefs, homebrew/core and homebrew/cask).
==> Fetching downloads for: tablepro
✔︎ Cask tablepro (0.39.0)                                                                     Verified     20.9MB/ 20.9MB
==> Installing Cask tablepro
==> Moving App 'TablePro.app' to '/Applications/TablePro.app'
🍺  tablepro was successfully installed!~ brew install --cask tablepro

Launch TablePro.

Expected behavior

TablePro should launch.

Database type

None

TablePro version

0.39.0

macOS version & chip

macOS Tahoe 26.4.1 on Apple M4 Pro

Screenshots / Logs

Image

System log shows the code signature failed validation.

default	17:24:04.615685-0600	runningboardd	Launch request for app<application.com.TablePro.53475406.53475532(501)>[0] is using uid 501 (divined from auid 501 euid 501)
default	17:24:04.615782-0600	runningboardd	Acquiring assertion targeting app<application.com.TablePro.53475406.53475532(501)> from originator [osservice<com.apple.coreservices.uiagent(501)>:648] with description <RBSAssertionDescriptor| "LS launch com.TablePro" ID:410-648-17614 target:app<application.com.TablePro.53475406.53475532(501)> attributes:[
	<RBSDomainAttribute| domain:"com.apple.launchservicesd" name:"LaunchRoleUserInteractive" sourceEnvironment:"(null)">
	]>
default	17:24:04.615864-0600	runningboardd	Assertion 410-648-17614 (target:app<application.com.TablePro.53475406.53475532(501)>) will be created as active
default	17:24:04.622132-0600	runningboardd	Checking PreventLaunch: global:0 exPath:/Applications/TablePro.app/Contents/MacOS/TablePro predicates:(null) allow:(null)
default	17:24:04.622174-0600	runningboardd	Creating and launching job for: app<application.com.TablePro.53475406.53475532(501)>
default	17:24:04.622191-0600	runningboardd	_mutateContextIfNeeded called for com.TablePro
default	17:24:04.622325-0600	runningboardd	app<application.com.TablePro.53475406.53475532(501)>: -[RBPersonaManager personaForIdentity:context:personaUID:personaUniqueString:] required 0.000000 ms (wallclock); resolved to {4294967295, (null)}
default	17:24:04.666958-0600	taskgated-helper	Checking profile: TablePro Developer ID
error	17:24:04.667007-0600	taskgated-helper	com.TablePro: Unsatisfied entitlements: keychain-access-groups
error	17:24:04.667041-0600	taskgated-helper	Disallowing: com.TablePro
default	17:24:04.667684-0600	amfid	/Applications/TablePro.app/Contents/MacOS/TablePro not valid: Error Domain=AppleMobileFileIntegrityError Code=-413 "No matching profile found" UserInfo={NSURL=file:///Applications/TablePro.app/, unsatisfiedEntitlements=<CFArray 0xb6b08bc00 [0x1f320f380]>{type = immutable, count = 1, values = (
	0 : <CFString 0x1f3270088 [0x1f320f380]>{contents = "keychain-access-groups"}
)}, NSLocalizedDescription=No matching profile found}
default	17:24:04.667831-0600	kernel	AMFI: When validating /Applications/TablePro.app/Contents/MacOS/TablePro:
  Code has restricted entitlements, but the validation of its code signature failed.
Unsatisfied Entitlements: keychain-access-groups
default	17:24:04.667836-0600	kernel	mac_vnode_check_signature: /Applications/TablePro.app/Contents/MacOS/TablePro: code signature validation failed fatally: When validating /Applications/TablePro.app/Contents/MacOS/TablePro:
  Code has restricted entitlements, but the validation of its code signature failed.
Unsatisfied Entitlements: keychain-access-groups
default	17:24:04.667851-0600	kernel	proc 11398: load code signature error 4 for file "TablePro"
default	17:24:04.668539-0600	kernel	ASP: Security policy would not allow process: 11398, /Applications/TablePro.app/Contents/MacOS/TablePro
error	17:24:04.669449-0600	runningboardd	<OSLaunchdJob | handle=718433E8-F536-41F4-80CB-E693B83CDB40>: job failed to spawn, plist={
	Platform => 1
	ProcessType => App
	EnableTransactions => false
	_ManagedBy => com.apple.runningboard
	CFBundleIdentifier => com.TablePro
	_ResourceCoalition => app<application.com.TablePro.53475406.53475532(501)>
	_DisablePointerAuth => true
	ThrottleInterval => 2147483647
	MachServices => {
	}
	EnablePressuredExit => false
	LimitLoadToSessionType => [<capacity = 8>
		0: Aqua
		1: LoginWindow
	]
	InitialTaskRole => 2
	EnvironmentVariables => {
		__CF_USER_TEXT_ENCODING => 0x1F5:0x0:0x52
		TMPDIR => /var/folders/pk/4nl66wcd2d555py_t122f5sh0000gn/T/
		SHELL => /bin/zsh
		HOME => /Users/king
		OSLogRateLimit => 64
		SSH_AUTH_SOCK => /var/run/com.apple.launchd.R2aBKD3imZ/Listeners
		LOGNAME => king
		PATH => /usr/bin:/bin:/usr/sbin:/sbin
		XPC_SERVICE_NAME => com.apple.Finder
		__CFBundleIdentifier => com.TablePro
		COMMAND_MODE => unix2003
		USER => king
		XPC_FLAGS => 0x0
	}
	_AdditionalProperties => {
		RunningBoard => {
			TMPDIR =<…>
error	17:24:04.671503-0600	CoreServicesUIAgent	LAUNCH: RBSLaunchRequest FAILURE <private> com.TablePro <private> 0x0-0x201201 failed with error Error Domain=RBSRequestErrorDomain Code=5 "Launch failed." UserInfo={NSLocalizedFailureReason=Launch failed., NSUnderlyingError=0x7192a28e0 {Error Domain=NSPOSIXErrorDomain Code=163 "Unknown error: 163" UserInfo={NSLocalizedDescription=Launchd job spawn failed}}}
error	17:24:04.671550-0600	CoreServicesUIAgent	LAUNCH: Runningboard launch of com.TablePro <private> returned RBSRequestErrorFailed, error Error Domain=RBSRequestErrorDomain Code=5 "Launch failed." UserInfo={NSLocalizedFailureReason=Launch failed., NSUnderlyingError=0x7192a28e0 {Error Domain=NSPOSIXErrorDomain Code=163 "Unknown error: 163" UserInfo={NSLocalizedDescription=Launchd job spawn failed}}}, so returning -10810
error	17:24:04.671652-0600	CoreServicesUIAgent	LAUNCH: request execute thru runningboard of 0x0-0x201201 com.TablePro/<private> failed with error=Error Domain=RBSRequestErrorDomain Code=5 "Launch failed." UserInfo={NSLocalizedFailureReason=Launch failed., NSUnderlyingError=0x7192a28e0 {Error Domain=NSPOSIXErrorDomain Code=163 "Unknown error: 163" UserInfo={NSLocalizedDescription=Launchd job spawn failed}}}
default	17:24:04.670017-0600	runningboardd	Invalidating assertion 410-648-17614 (target:app<application.com.TablePro.53475406.53475532(501)>) from originator [osservice<com.apple.coreservices.uiagent(501)>:648]
default	17:24:04.685525-0600	syspolicyd	GK evaluateScanResult: 3, PST: (path: 37f6410e0849a8e7), (team: D7HJ5TFYCU), (id: com.TablePro), (bundle_id: (null)), 1, 1, 1, 0, 4, 4, 1
default	17:24:04.686758-0600	gamepolicyd	Received state update for -1 (app<application.com.TablePro.53475406.53475532(501)>, none-NotVisible
default	17:24:04.687298-0600	syspolicyd	Found provenance data on target: TA(d16c70e94b0a44e4, 2), PST: (path: 37f6410e0849a8e7), (team: D7HJ5TFYCU), (id: com.TablePro), (bundle_id: (null))
default	17:24:04.783356-0600	gamepolicyd	Received state update for -1 (app<application.com.TablePro.53475406.53475532(501)>, none-NotVisible

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions