CFAST8 Beta fails MacOS malware checks

[rpeacoc]

Attempting to run CEdit with latest MacOS version result in numerous security warnings. Here's one of them. All are similar.

It does it again running CFAST from the Run button, and for several of the Intel libraries before finally allowing the model to run. It's possible to get past each of these going into Setting, Privacy and Security, and telling the OS to "Run Anyway" for each. This might be a big hurdle for the ordinary user.

[rmcdermo]

@rpeacoc OK, I will work on it.

[rpeacoc]

You have to give special permission via the privacy and security setting for each part (CEdit, CFAST, and then each of the Intel dynamic libraries, one at a time before it all runs. I think it’s a one time process but each one is a red flag that kinda implies that there might be malware in the software. Scary for the average user Sent from my iPhoneOn Aug 5, 2026, at 12:59 PM, Randy McDermott ***@***.***> wrote:rmcdermo left a comment (firemodels/cfast#2392) @rpeacoc OK, I will work on it. —Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you were mentioned.Message ID: ***@***.***>

[rmcdermo]

I tried ad hoc signing and that did not work either. Something has changed, though, because I thought this was working previously. In the mean time, you can always launch the editor via python by doing:

cd cfast/Source/CeditQt
python cedit_qt.py

if you just want to test things.

I have an Apple Developer ID and have been in talks with the powers that be here at NIST to get a full fledged signature registered with Apple. So, we may just be at the point of having to invoke that.

[mcgratta]

How do FDS and Smokeview avoid all this?

[rmcdermo]

Well, this is because we are getting fancy with a .app or .exe; when one of these is downloaded the Mac "GateKeeper" will quarantine it if it is not signed. I don't understand all this very well. For example, when I was building and testing the cedit.app locally on my mac, it did not care. But now that I am testing the bundles and downloading it, I am seeing this problem too.

[rmcdermo]

@rpeacoc Obviously, this is not a permanent fix, but to test the nightly bundles until I get the codesign to work properly, do this after you install:

xattr -dr com.apple.quarantine /Applications/CFAST8

then you should be able to run as usual.

[gforney]

I dont recall doing anything to avoid this. We are not signing bundles in original bundle scripts. Glenn Forney

…

On Wed, Aug 5, 2026, 2:30 PM Kevin McGrattan ***@***.***> wrote: *mcgratta* left a comment (firemodels/cfast#2392) <#2392 (comment)> How do FDS and Smokeview avoid all this? — Reply to this email directly, view it on GitHub <#2392?email_source=notifications&email_token=AC6UCRSO3PJVFLJAS3DKBND5IN4NJA5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTKMJZGU3TCNJQGM42M4TFMFZW63VKON2WE43DOJUWEZLEUVSXMZLOOSWGM33PORSXEX3DNRUWG2Y#issuecomment-5195715039>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AC6UCRQ4QEFVNWBANC6QZZ35IN4NJAVCNFSNUABEKJSXA33TNF2G64TZHMZTQMBVGIZDANZ3JFZXG5LFHM2TANZTGA3TENBRG6QXMAQ> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>