Skip to content

[BUG] Lipo breaks apps with code integrity check -> Blacklist #561

@drybx

Description

@drybx

New Issue Checklist

  • I updated Pearcleaner to the latest version and still observe the issue
  • I searched for existing GitHub issues
  • OS Version: macOS 26.3
  • Pearcleaner Version: 5.4.3.121

Issue:

When using Pearcleaner's lipo feature to thin universal binaries, the process inherently modifies the application bundle and invalidates its original code signature. For apps that enforce strict code integrity checks (such as Little Snitch or AdGuard), this modification causes them to fail to launch or function correctly afterwards.

Steps:

Run Pearcleaner's lipo tool on an application with strict integrity checks, like Little Snitch or AdGuard.

Attempt to open the newly thinned app.

The app crashes or refuses to start due to signature/integrity validation failures.

Proposed Solution

I suggest adding a default exclusion list (blacklist) for the lipo feature. Apps known to have strict code integrity checks—such as Little Snitch, AdGuard, and potentially other security-focused or network-monitoring tools—should be excluded from thinning by default.

Alternatively, if an automatic exclusion list is too difficult to maintain, Pearcleaner could check if the app has specific entitlements or strict signing flags and display a warning prompt before proceeding with lipo.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions