MacOS – How to make packages out of non-package installers

"fPermittedFrontASNs" points to the new Gatekeeper Function Apple introduced in 10.8 and which changes the way background processes behave and are able to launch child processes that interact with the user interface.

The Gatekeeper-Rule "Allow Applications downloaded from: Anywhere" still has some restrictions, as an example at this Apple Support Page points out:

"Anywhere – Allow applications to run regardless of their source on the Internet; Gatekeeper is effectively turned off. Note: Developer ID-signed apps that have been inappropriately altered will not open, even with this option selected."

I don't know if that specific note applies to Hotspot Shield, but i have seen similar Problems with other VPN-related Software.

I suggest you deactivate Gatekeeper completely for the Installation of HotSpot Shield. You can do that in the Terminal with:

sudo spctl --master-disable

After that a restart might be necessary. You can activate Gatekeeper after the Installation with:

sudo spctl --master-enable

For more Options look at 'man spctl' in the Terminal. Please tell if that solved your problem.

Could you do this with Platypus? I use it to package small executables with a shell script into an install app, which uses the shell script to move executables into the target folder on run. You're still going to have issues with your intended result however as I can't see any way around running a package install without requiring admin access IF the package normally modifies files that require admin permission, but you should be able to put the package, the configuration file, and the install script together into one app using Platypus. End users can then run the app to install the package with your desired configuration.

The setup is really simple, the output is minimal. This is not a program designed to do anything complicated but it is free and has been really useful for distributing self-written script-based apps.