Documentation
How it works

macOS 27 and migration changes

How paths, app identity and permissions affect migration choices.

When an app moved using an older method has launch or data-access problems on macOS 27, check data location, application signature and system permissions separately. They are related but distinct.

Why older approaches can run into trouble

An application container is a data area managed by macOS. Access involves checks of app identity, permissions and parts of the directory structure.

Replacing container data with a symbolic link to an external location may take access outside its original permission scope. Re-signing can change the developer identity and entitlements, so existing container-access records no longer match.

In the tested macOS 27.0 environment, officially signed and re-signed WeChat behaved differently; some re-signed samples failed to open normally. This is evidence to investigate, not a finding that applies identically to every app and OS version.

Why AppPorts changed its approach

Mount migration attaches an eligible data volume at the original path while preserving the real app's signature. Migration and manual signing are now separate, so choosing a new storage location does not also change app identity.

AppPorts protects critical container structure and distinguishes Signature Replaced from Signature check pending. The latter may result from an offline drive or a failed read; it must not be treated as proof of a damaged signature.

Mounting still requires suitable storage and authorization. It does not make every container directory eligible. See data migration methods.

Updates, upgrades and repairs

ActionWhat it addressesWhat it does not do automatically
Update AppPortsObtain that version's checking, migration and recovery improvementsConvert old links to mounts or repair earlier signatures.
Upgrade macOSChange the OS versionCheck whether old migrations remain suitable.
Repair an existing migrationRestore data paths and app identity according to their stateRequire every user to upgrade to macOS 27.

Check legacy container migrations before upgrading macOS. If a problem has already occurred, preserve data and copies before following repair steps. A signature error alone does not prove data damage; that needs separate verification.

Continue reading

For steps, see macOS 27 upgrades and repair. For evidence, read the symbolic-link, mount and permission, and container structure experiments.

On this page