What should I do about com.apple.quarantine?

Question

I've downloaded some .jar files from the internet and want to use them under Mac OS X. But the OS seems to have tagged them with the extended attribute com.apple.quarantine (no indication of this until I noticed the "@" in the ls -l and figured out how to use ls -l@) -- apparently because they have been downloaded from the internet. What's the right way to deal with this?

Answer 1

This attribute is added so that it can ask for user confirmation the first time the downloaded program is run, to help stop malware. Upon confirmation the attribute should be removed and then the program will run normally.

Answer 2

You don't have to deal with it. Open it and OS X will ask for your permission. Or like richard suggested, delete it using something like:

xattr -d com.apple.quarantine my_jar.jar

To do this automatically for any downloaded file you can attach a folder action to the download folder, like described on macosxhints.com in 10.5: Remove the 'downloaded file' warning flag.

EDIT, the following was posted on macosxhints.com just today, for Safari: 10.5: Disable the 'downloaded from internet' file warning. (I am not advising anyone to actually get rid of that security measure.)

Answer 3

 xattr -d com.apple.quarantine /path/to/file

Answer 4

I found the following command

find Application.app | while read l do; echo $l; xattr -d com.apple.quarantine "$l"; done

very helpful when trying to get rid of the attribute. Note the double quotes around $l - you need them if your apps folder contains files with a blank in their name.

Thomas