Use the Keka helper to get rid of the Keka quarantine flag

[aonez]

Since compressed files from a sandboxed app are set with a quarantine flag, give the option to remove that flag, using the Keka helper currently used for setting Keka as the default app.

Asked by Jérôme via mail.

Fixes #215 and probably #285.

• Remove the quarantine flag from compressions -> Fixed in v1.2.6
• Remove the quarantine flag from extractions

[alvarnell]

Which disables all macOS file security features. Why would anyone want to do that?

[aonez]

@alvarnell this only applies to newly compressed files. There's a sandbox key that prevents this quarantine to apply, but it's not allowed by Apple in third party apps: com.apple.security.files.user-selected.executable

For example TextEdit.app uses that key and you can see that any new file you create with TextEdit does not have the quarantine flag. In my opinion this key should be allowed in some third party apps.

[alvarnell]

Got it. I've been following Howard Oakley's discussion of this in a couple of articles:
https://eclecticlight.co/2019/04/26/🎗-quarantine-documents/
https://eclecticlight.co/2019/05/03/serious-flaw-in-macos-quarantine-can-stop-you-from-opening-documents/

His conclusion and that of "Martin" is that this is a bug that Apple needs to fix and there is a Radar number at the end you can reference should you decide to take that route.

[aonez]

Thanks for the references @alvarnell. I really did a lot of research and tests for your ticket #176, #293 and #294. Just now found an issue trying to update an uncompressed Keka build to test #407 & #408, where the quarantine flag made Keka open in translocation and therefore the update process fails.

Hopefully they'll fix this in the future.

[alvarnell]

A couple more recent postings.
The Radar is now viewable as an OpenRadar:
https://openradar.appspot.com/radar?id=4985000587952128

And more from Howard where it seems the root cause is the XProtect process:
https://eclecticlight.co/2019/05/04/documents-from-an-unidentified-developer-quarantine-misbehaviour-in-the-log/

[aonez]

Build with this implemented: Keka-v1.2.6-r4368
Needs new helper version to work.