A upcoming change in the way the OS X security feature Gatekeeper works is essentially going to force developers to re-build and re-"sign" their applications and submit updates to Apple for programs that need to run in Mavericks or Yosemite. The upcoming change for security purposes only affects those running the forthcoming 10.9.5 or later, but cause cause apps that aren't updated to "break" (not launch) except through bypassing Gatekeeper, which most users will be loathe to do. The change will not force users to update their OS versions.

The Gatekeeper change will, however, cause minor issues for users who will be running Mavericks 10.9.5 and later, as developers who fail to rebuild their apps for Mavericks (and thus update the developer "signing" that verifies the code) could be inundated with complaints from users who find that the apps no longer launch. While there is an easy workaround for the problem -- right-clicking on the app in question to open it bypasses Gatekeeper -- the issue incentivizes most developers to update their apps.

The updated signing will likely be rolled into normal updates for most apps, and any programs currently in active development from registered Apple developers is unlikely to be affected by the problem. Developers who are building their apps on machines that run some version of OS X older than Mavericks, however, are essentially being forced to upgrade their OS, reports 9to5Mac. This again should not be a big issue, as most developers should already be running Mavericks, and nearly any Mac being used for iOS or OS X development is recent enough to quality for the free 10.9 upgrade.

However, third-party developers who are outside Apple's Developer Program -- such as many freeware and web app makers who are not part of Apple's $99 per year developer program -- could find their apps unlaunchable in the manner users are used to once the 10.9.5 upgrade is released, which is likely to happen later this summer. It could be that Apple will offer some workaround or reset deadlines for compliance if the problem appears to be widespread, but as the most likely source of any future malware outbreaks would likely be from unsigned, unregistered apps and developers, Apple is not expected to bend much from its security-conscious stand.



The Gatekeeper feature in OS X 10.7.5 and later is intended as an anti-malware protector, which prevents unsigned or otherwise problematic code from being run until users verify its legitimacy. It has proven to be very effective, but there are legitimate developers who choose not to sign up for Apple's developer program for one reason or another. An example is Joël Barrière, who created and maintains the well-regarded system maintenance program OnyX. As his software is given away for free and also supports much older versions of OS X, Barrière has chosen not to pay for an ADC membership at present.

Gatekeeper can be turned off, if desired, by users -- but this creates a much higher risk for non-virus malware to be accidentally installed and run. By default, Apple turns Gatekeeper on in the security settings of OS X 10.8 and higher, allowing both Mac App Store apps and "identified developer" apps (those who are part of the Apple developer connection but have chosen not to sell some apps exclusively in the Mac App Store)n to run automatically on launch. Unknown third-party apps from developers who are not "known" to Apple -- or, starting in 10.9.5, those who haven't updated the app for Mavericks -- will get flagged by Gatekeeper for not having a valid signature.

Apps that do go through the update process will still be able to run on OS X systems back to 10.6 (Snow Leopard), so users will not face a "forced migration" to later OS versions, but at present Apple estimates that less than half of the Mac user base is running an OS X version older than the current one. The updated Gatekeeper and compliance with it by developers will become more important following the release of the next major OS upgrade, Yosemite (10.10), expected this fall, as Mac users have taken to rapidly adopting new versions of OS X as the price has fallen. Mavericks was released free of charge, and Yosemite will be as well.