After running sudo sysctl -w security.mac.amfi.verbose_logging=1, then log stream --predicate "sender == 'AppleMobileFileIntegrity' or sender == 'AppleSystemPolicy' or process == 'amfid' or process == 'taskgated-helper' or process == 'syspolicyd'", I found some entries may relevant:
syspolicyd: [com.apple.syspolicy.exec:default] Code evaluation completed: 1
Adding Gatekeeper denial breadcrumb (open): PST : (vuid: ***), (objid: ***), (team: ***), (id: (null)), (bundle_id: (null))
syspolicyd: (CoreServicesInternal) CFURLCreateBookmarkData
syspolicyd: [com.apple.syspolicy.exec:default] Terminating process due to Gatekeeper rejection : 89905,
kernel: (AppleSystemPolicy) ASP: Security policy would not allow process: 89905,
Post
Replies
Boosts
Views
Activity
I check the dmg by calculating md5 checksum, and the checksum result is identical