Yubico / yubikey-neo-manager

Cross platform personalization tool for the YubiKey NEO
https://developers.yubico.com/yubikey-neo-manager/
BSD 2-Clause "Simplified" License
57 stars 12 forks source link

Doesn't install on OSX El Capitan #39

Closed pettai closed 9 years ago

pettai commented 9 years ago

Installation ends with the message: "The Installation Failed. The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance"

PCSC framework should be there (like Yosemite's), so hopefully it should be a trivial fix... http://ludovicrousseau.blogspot.se/2015/06/pcsc-framework-will-stay-in-mac-os-x.html

lfaraone commented 9 years ago

Seems to come down to this failed operation:

Traceback (most recent call last):
File "/tmp/PKInstallSandbox.VfHvCx/Scripts/com.yubico.pkg.YubiKeyNEOManager.4QNnt8/postinstall", line 71, in <module>
    main()
  File "/tmp/PKInstallSandbox.VfHvCx/Scripts/com.yubico.pkg.YubiKeyNEOManager.4QNnt8/postinstall", line 62, in main
    with open(FNAME, 'w') as f:
IOError: [Errno 1] Operation not permitted: '/usr/libexec/SmartCardServices/drivers/ifd-ccid.bundle/Contents/Info.plist'

... which I assume is related to the security enhancements provided in El Capitan. See also the full install log.

dainnilsson commented 9 years ago

Thanks for the installation log! Indeed this does look like it's caused by the "System Integrity Protection" in El Capitan. I'm not sure if there is a way to work around it, or if the patch will have to just fail silently on this error and leave the CCID configuration unpatched.

dainnilsson commented 9 years ago

A workaround is booting into recovery and unchecking Enforce System Integrity Protection from the Utilities > Security Configuration and then running the installer, which allows it to install and patch the file. Once the file is patched you can re-enable System Integrity Protection. I believe this should work, but have not tested it.

dainnilsson commented 9 years ago

Closing as this should be working now.