
Once an application has passed File Quarantine or Gatekeeper, it will be allowed to run normally and will not be verified again. Apple can revoke the developer's certificate with which the application was signed and prevent further distribution. Gatekeeper will refuse to open the application if the code-signing requirements are not met. If the application is blacklisted, then File Quarantine will refuse to open it and recommend to the user to move it to trash.
#Antivirus software for mac os x 10.7.5 mac os x
Since Mac OS X Snow Leopard, the system keeps two blacklists to identify known malware or insecure software.
#Antivirus software for mac os x 10.7.5 download
Upon download of an application, a particular extended file attribute ("quarantine flag") can be added to the downloaded file. The command-line utility spctl provides granular controls, such as custom rules and individual or blanket permissions, as well as an option to turn Gatekeeper off. However, this option can be re-enabled by using the 'sudo spctl -master-disable' command from the Terminal and authenticating with an admin password. Since macOS Sierra, this option is hidden by default. Anywhere Allows all applications to be launched. This is the default setting since Mountain Lion. Mac App Store and identified developers Allows applications downloaded from the Mac App Store and applications signed by certified Apple developers to be launched. Mac App Store Allows only applications downloaded from the Mac App Store to be launched. In the security & privacy panel of System Preferences, the user has three options, allowing apps downloaded from:

Since macOS Sierra, the "Anywhere" option is hidden by default. Gatekeeper options in the System Preferences application.
