User profile for user: Tom Ekl?f
Tom Ekl?f Author
User level: Level 1
56 points

/usr/bin/shortcuts no longer works in 14.7.5 (23H527) ?

I've been using /usr/bin/shortcuts for various tasks (eg. Quicksilver uses it to list and run shortcuts), and after updating from 14.7.4 to 14.7.5 the tool gets killed on startup. Eg. here is what it looks like in my shell:


❯ shortcuts list
zsh: killed     shortcuts list


Looking at system logs it seems like the binary is missing an entitlement, which causes MACF / Gatekeeper to throw a fit:


2025-04-12 18:38:48.847576  kernel: mac_vnode_check_signature: /usr/bin/shortcuts: code signature validation failed fatally: When validating /usr/bin/shortcuts:
  in-kernel: com.apple.shortcuts.ShortcutsCommandLine disallowed without com.apple.private.security.restricted-application-groups
2025-04-12 18:38:48.847582  kernel: validation of code signature failed through MACF policy: 1
2025-04-12 18:38:48.847583  kernel: check_signature[pid: 2475]: error = 1
2025-04-12 18:38:48.847587  kernel: proc 95761: load code signature error 4 for file "shortcuts"
2025-04-12 18:38:48.847613  kernel: exec_mach_imgact: not running binary "shortcuts" built against preview arm64e ABI
2025-04-12 18:38:48.855481  syspolicyd: (Security) SecTrustEvaluateIfNecessary
2025-04-12 18:38:48.857970  syspolicyd: [com.apple.syspolicy.exec:default] GK evaluateScanResult: 2, PST: (path: /usr/bin/shortcuts), (team: (null)), (id: (null)), (bundle_id: (null)), 0, 0, 1, 0, 1, 1, 0evaluateScanResult: 2, PST: (path: /usr/bin/shortcuts), (team: (null)), (id: (null)), (bundle_id: (null)), 0, 0, 1, 0, 1, 1, 0


I used Time Machine to compare the binary's entitlements between 14.7.4 and 14.7.5, and looks like in 14.7.5 /usr/bin/shortcuts indeed is missing the com.apple.private.security.restricted-application-groups entitlement that 14.7.4 had. The old binary had these two entitlements that the new one doesn't:


	[Key] com.apple.private.security.restricted-application-groups
	[Value]
		[Array]
			[String] group.com.apple.shortcuts
			[String] group.is.workflow.my.app
			[String] group.is.workflow.shortcuts
	[Key] com.apple.security.application-groups
	[Value]
		[Array]
			[String] group.com.apple.shortcuts
			[String] group.is.workflow.my.app
			[String] group.is.workflow.shortcuts


Is there a sensible workaround for this (and by "sensible" I mean something that'd allow me to keep using the tool)?

MacBook Pro 16″, macOS 14.7

Posted on Apr 12, 2025 10:44 AM

Reply
Question marked as ⚠️ Top-ranking reply
User profile for user: Luis Sequeira1
Luis Sequeira1
User level: Level 9
70,026 points

Posted on Apr 13, 2025 1:09 AM

This appears to be a bug. The user, even with admin privileges, cannot change these entitlements, so it seems to me that the only course of action is to provide feedback and report the issue as clearly as possible, and hope that Apple fixes it. I don’t know if this happens in Sequoia as well, and I won’t be able to test until later.

View in context
7 replies
Sort By: 
Question marked as ⚠️ Top-ranking reply
User profile for user: Luis Sequeira1
Luis Sequeira1
User level: Level 9
70,026 points

Apr 13, 2025 1:09 AM in response to Tom Ekl?f

This appears to be a bug. The user, even with admin privileges, cannot change these entitlements, so it seems to me that the only course of action is to provide feedback and report the issue as clearly as possible, and hope that Apple fixes it. I don’t know if this happens in Sequoia as well, and I won’t be able to test until later.

Reply
User profile for user: etresoft
etresoft
User level: Level 9
53,928 points

Apr 13, 2025 8:19 AM in response to Tom Ekl?f

As others have said, it's just a bug. It works fine in Sequoia, at least on the two non-current versions that I've tested it on. 😄


This is normal system upgrade behaviour. You can't get too attached to any system software feature. The more obscure the feature, the more likely it is to get randomly broken. When you find a version that works well for you, stick with it. Those news features the latest Fancy New Version may sound attractive, but they may not actually exist, and you always get new bugs.

Reply
User profile for user: Tom Ekl?f
Tom Ekl?f Author
User level: Level 1
56 points

Apr 13, 2025 12:13 PM in response to etresoft

Hah yeah usually I'm pretty cavalier with patch version updates, and I think this is the first time one of them completely broke something I use all the time, and without any readily apparent workaround.


I tend to avoid major OS version updates like the plague (although I've had surprisingly few disasters in the 20+ years I've used OS X / macOS) and I've been getting a bit leery of minor version updates too; there's a reason why I'm still using Sonoma. Patch updates are usually chock full of security-related fixes that I'm keen to keep up with, though.


That'll learn me, I guess 😀


[Insert obligatory cranky middle aged nerd rant about Apple's constantly declining quality here]

Reply
User profile for user: youhadmeathello
youhadmeathello
User level: Level 1
14 points

Apr 16, 2025 1:59 PM in response to Luis Sequeira1

Having the same issue. After upgrading from 14.7.4 to 14.7.5 I'm no longer able to call shortcuts from Perceptive Automation's Indigo. Those guys are great though.


Anyway, I submitted a feedback bug report to the Automator App since Shortcuts is not listed. Every voice counts. It's either supported or it's not. Sonoma is a solid OS and I need to use it as Sequoia will break my older RAID hardware. That's an expense I do not need right now.

Reply
User profile for user: Tom Ekl?f
Tom Ekl?f Author
User level: Level 1
56 points

Apr 13, 2025 5:58 AM in response to Luis Sequeira1

Oh yeah I know there's no way to add those entitlements or get around launch constraints (at least with SIP on), I was just hoping that somebody knew of a workaround, or if this is by design and the cli tool has been deprecated or something like that.


Hmm, I wonder if it'd be possible to trick something that does have that entitlement to run /usr/bin/shortcuts. Doesn't seem too likely considering it'd probably be worth a CVE number.

Reply
User profile for user: TheWhiteSquirrel
TheWhiteSquirrel
User level: Level 1
8 points

Apr 26, 2025 10:58 PM in response to Tom Ekl?f

This is a show stopper for me. I've not yet known an update, focused on security fixes, to break something so essential. Upgrades, yes. [that's why I stick with macOS 14 since 15 breaks some stuff I can't afford to break].


If I was to pull /usr/bin/shortcuts from Time Machine, getting the 14.7.4 version, would that work? I've been troubleshooting this issue for days and this post finally came up in my search as I had not seen anyone else have this issue.

Reply

/usr/bin/shortcuts no longer works in 14.7.5 (23H527) ?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.
Learn more Sign up