How can I run an unsigned script in Automator

Question

I can run the well-respected perl script exiftool from the command line in Terminal and achieve the desired result, but when I incorporate it in Automator as a Service I get a generic error message and the perl script is not executed. When I look in the system.log I find: "The operation couldn’t be completed. (OSStatus error -67062.)" i.e., Code object is not signed.

Correct, exiftool is not signed, and there is nothing I can do about that. I had to bypass Gatekeeper to install it in Yosemite (10.10.5). But the script is well know in photography circles and has been used by many to edit the EXIF information in image files.

I tried to add the script or my Automator workflow to System Preferences > Security & Privacy > Privacy > Accessibility but the panel won't accept either.

Is there some way to tell Automator to accept this unsigned script or a command or switch I can put in my bash script to have it accepted?

Here is my current shell script:

for f in “$@”
do
exiftool -overwrite_original -AllDates-=1 "$f"
done

Thanks for any help.

Answer 1

The exiftool installs into /usr/bin. Under SIP this is not permitted. I assume the developer will change this at some stage.

If you install in /usr/local/bin it should work, and you won't have to override anything.

EDIT I believe the latest has been changed to install in /usr/local/bin I have never bothered to install it myself, I just run from a local directory.

Answer 2

OK, turns out there were two things I was doing wrong and neither of them had to do with exiftool being unsigned. Something is causing my system.log to report 'Code object is not signed' with some frequency, and after further examination, I began to suspect it wasn't my Automator script because they were generated even when I wasn't attempting to run Automator.

Error 1: in my DO loop I pasted in curly quotes, that was generating the shell script error. By replacing them with standard " quotes, the shell script error went away.

Error 2: I had set Pass input as stdin, it should have been as arguments

Bonus: Phil, the author of exiftool, who found these answers that had defeated me, suggested a single line that is more efficient than my DO loop and it works very well:

exiftool -overwrite_original -AllDates-=1 "$@"