[Closed] RawTherapee macOS build needs URGENT testing

Software RawTherapee
21

Sorry, just a small bug. The application does not open, if inside the “Applications” folder, you create a folder with the application inside.

22

That is normal, this app is only for running in /Applications due to a security policy known as hardened runtime.

23

10.14.6
2016 MBP 15in
16GB RAM
Radenon Pro 455 2GB

Overall looks to be running ok. I got a random crash when I turned on Noise Reduction on a X-T2 file but was not able to reproduce the crash. I can navigate external drives and filed on my NAS. Had to reinstall ProPhoto profile as I don’t know where else to install other than direct into application’s package content directory.

I will continue to test and see if I find anything else.

24

@Lysander you will have to add /bin/sh to Full Disk Access

5.8 macOS 10.15 Catalina
Some security permissions may need to be set for some users to access directories other than ~ and ~/Pictures

  • You must physically add /bin/sh to Full Disk Access under Privacy in the Security & Privacy Control Panel.

  • You may need to navigate to the /bin folder using Go > Go to Folder… (Command-Shift-G)
    You can drag sh onto the panel.

This is caused by the structure of how the app is executed and I don’t think it is ideal at present, but does satisfy the runtime-environment requirements for elements of the gtk interface kit. These requirements can possibly be met by other entities within the application bundle, for instance Launch Services environment variable keys in the Info.plist file. Double-clicking the app runs an executable loader script (which is interpreted by /bin/sh/) sets some variables including gathering information about the locale then launches the rawtherapee binary.
https://github.com/Beep6581/RawTherapee/issues/5635

25

Did a bit more testing. Overall it is working but where I get inconsistent crashes are when turning on Noise Reduction. Tomorrow I will run RT from the terminal and direct output to a file to see what may be going on before a crash.

26

@HIRAM I would like to upload the build, do you feel it’s ready? If so, please explain briefly how a user should “install” or run it. I will add this info to the download page. The explanation should be as simple as possible…

These requirements can possibly be met by other entities within the application bundle, for instance Launch Services environment variable keys in the Info.plist file.

makes my head spin :wink:

27

HIRAM,

The solution you documented works. Thanks.

Also, are there any security risks associated withi this solution?

28

… this is strange, since with version 5.6 I had the application and other associated files (for example the HaldCLUT folder) all in a folder in the “Applications” folder.

29

@carlos1960 Understood, that is normal for 5.8 due to the application of a security policy known as hardened runtime. (A certain form of code signature which disallows the presentation of relative pathnames for system integrity and security).

1 Like
30

I know its not ideal but it seems reasonable for /bin/sh to see /, the way Mac life has been for a long time. The ideal solution for Catalina would be to restructure the bundle so the RawTherapee.app gets Full Disk Access instead of /bin/sh

31

@Morgan_Hardwood ok, yes this is ready.

To install: Unzip, open the .dmg, drag the RawTherapee app onto the Applications folder.

macOS 10.15 Catalina
To authorize: Go > Go to Folder…⇧⌘G (Command-Shift-G) to /bin, drag sh into the Full Disk Access pane under the Privacy tab in the Security & Privacy control panel in > System Preferences…

32

@HIRAM what is the character before “> System Preferences”? I just see a block.

33

Its an apple. There is a menu in the upper left hand corner called the apple menu. :apple: its just a little apple, , aka &#xF8FF

34

Thank you. Website updated.

1 Like
35

OK, I turned off /bin/sh under Full Disk Access and added Raw Therapee app.
RESULT: I contiunue to have access to all drives.

So, what is the difference between giving FDA to RT as opposed to /bin/sh?

36

Not sure but adding the app first did not work for me.
edit, more testing on that, adding /bin/sh to Full Disk Access is the only entity that can bequeath access to the embedded binary which is signed with only one key, com.apple.security.inherit : true ).

37

I confirm that the new version works perfectly. The new “Capture Sharpening” implementation is simply exceptional.

1 Like
38

@carlos1960 which exact version of which OS?

39

…this…