"This copy of Tunnelblick has been tampered with" when restarting Tunnelblick after using VPN profile for first time about tunnelblick HOT 7 CLOSED

@Makedeluxe - Thanks for your report and especially for tracking down why the signature is invalid.

Can you post a .zip of one of the bogus "Tunnelblick.app" subfolders that is being created? I'm hoping that will provide a clue about what part of Tunnelblick is creating it.

from tunnelblick.

@Makedeluxe - it might also help if you could post the contents of /Library/Application Support/Tunnelblick/tunnelblick-installer-log.txt immediately after getting the error (before any reinstall).

from tunnelblick.

Here's the contents of tunnelblick-installer-log.txt:

Tunnelblick installer started 2024-03-11 16:58:44.165220; getuid() = 503; geteuid() = 0; getgid() = 20; getegid() = 20
currentDirectoryPath = '/'; 1 arguments:
     0x0005
Determined username 'user1' from getuid(): 503
renamex_np() tests succeeded for /Applications
renamex_np() tests succeeded for /Library/Application Support/Tunnelblick
renamex_np() tests succeeded for /Users/user1/Library/Application Support/Tunnelblick/Configurations
Changed ownership of /Applications/Tunnelblick.app and its contents from 0:80 to 0:0
Removed any 'com.apple.quarantine' extended attributes
Tunnelblick installer succeeded

And here's the extra Tunnelblick.app -folder from inside Tunnelblick.app:

bogus-tunnelblick.zip

from tunnelblick.

@Makedeluxe - Thanks. Very interesting.

Exactly how are the users installing Tunnelblick?

Could they be installing by dragging/dropping Tunnelblick into Applications? Or using a script to do that?

That's not the recommended method, which is to double-click the Tunnelblick.app in the disk image. Of course, that shouldn't cause the extra copy of Tunnelblick.app to be copied into Tunnelblick.app, but it could help point to where Tunnelblick is doing this.

from tunnelblick.

Most users get the app automatically from Intune as a .dmg, not 100% sure how Intune handles the install.
Same thing happens on both automatic and manual installs with the disk image.

Now that I think about it Intune might have something to do with this. I'll try removing the app from there and see if the folder comes back in a manual install

from tunnelblick.

@Makedeluxe - Yes, to me this looks like an intune problem, or an intone setup problem, because nobody else has reported it.

Please post your results of testing without intune, and close this Issue if that avoids the problem.

from tunnelblick.

After disabling the installation from Intune the problem no longer appears. Apparently other apps installed in the same way also got the extra folder but they didn't respond as aggressively to it.

Thanks for the help, probably wouldn't have found the root of the problem without talking about it

from tunnelblick.