dustinrue / ControlPlane

ControlPlane - context-sensitive computing for OS X
http://www.controlplaneapp.com
BSD 3-Clause "New" or "Revised" License
1.75k stars 180 forks source link

Mount actions always result in prompt in OSX 10.12 #470

Closed JohnnyricoMC closed 7 years ago

JohnnyricoMC commented 7 years ago

As of OS X 10.12, the mount actions will always result in a prompt for a username and password, regardless of the password for the volume being stored in the keychain:

screenshot 2016-11-05 00 57 53

The cause of this appears to lie outside of ControlPlane: Apple no longer permits mounting in /Volumes unless root (their words). Ref: rdar://27812516: Changes to /Volumes permissions prevent use of mount command

People in this Apple Developer forum thread have devised a workaround: macOS Sierra Automount on Startup | Apple Developer Forums By mounting their network volumes in a different location, e.g. ~/servername/sharename, they are no longer greeted by a password prompt. ControlPlane users could mimic this by employing the ShellScript action (and pointing to a script containing their mount commands) instead of the Mount action.

However, the security problem I see with the various proposed script solutions is they all appear to involve including the password in plain text rather than depending on the keychain.

Is there a way ControlPlane could mount network volumes in a location other than /Volumes while still making use of the Keychain?

dustinrue commented 7 years ago

There is nothing I can do to resolve this right now. I get the same behavior even if I manually access shares and I'm assuming it is either now desired behavior of macOS Sierra or a bug.