Entitlements: ============= <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>com.apple.security.temporary-exception.files.absolute-path.read-write</key> <array> <string>/private/var/db/mds/</string> <string>/usr/local/myorg/Mcp/bin/</string> <string>/usr/local/myorg/StatefulFirewall/bin/</string> </array> <key>com.apple.developer.endpoint-security.client</key> <true/> <key>com.apple.developer.networking.networkextension</key> <array> <string>app-proxy-provider-systemextension</string> <string>content-filter-provider-systemextension</string> </array> <key>com.apple.security.app-sandbox</key> <true/> <key>com.apple.security.application-groups</key> <array> <string>group.com.myorg.endpoint</string> </array> <key>com.apple.security.automation.apple-events</key> <true/> <key>com.apple.security.files.user-selected.read-write</key> <true/> <key>com.apple.security.network.server</key> <true/> <key>com.apple.security.network.client</key> <true/> </dict> </plist> ======================================================================================================= Crash dump: ========== Process: com.myorg.CMF.networkextension [503] Path: /Library/SystemExtensions/*/com.myorg.CMF.networkextension Identifier: com.myorg.CMF.networkextension Version: ??? Code Type: X86-64 (Translated) Parent Process: launchd [1] Responsible: com.myorg.CMF.networkextension [503] User ID: 0 Date/Time: 2021-09-30 12:55:27.365 -0400 OS Version: macOS 11.5.1 (20G80) Report Version: 12 Anonymous UUID: BBAF0CEC-BDE6-1239-9E5D-9099403D7616 Time Awake Since Boot: 63 seconds System Integrity Protection: enabled Crashed Thread: Unknown Exception Type: EXC_CRASH (Code Signature Invalid) Exception Codes: 0x0000000000000000, 0x0000000000000000 Exception Note: EXC_CORPSE_NOTIFY Termination Reason: Namespace CODESIGNING, Code 0x1 kernel messages: VM Regions Near 0 (cr2): --> mapped file 102b7f000-102baf000 [ 192K] r-x/r-x SM=COW Object_id=2f6c9e1b Backtrace not available Unknown thread crashed with ARM Thread State (64-bit): x0: 0x0000000000000000 x1: 0x0000000000000000 x2: 0x0000000000000000 x3: 0x0000000000000000 x4: 0x0000000000000000 x5: 0x0000000000000000 x6: 0x0000000000000000 x7: 0x0000000000000000 x8: 0x0000000000000000 x9: 0x0000000000000000 x10: 0x0000000000000000 x11: 0x0000000000000000 x12: 0x0000000000000000 x13: 0x0000000000000000 x14: 0x0000000000000000 x15: 0x0000000000000000 x16: 0x0000000000000000 x17: 0x0000000000000000 x18: 0x0000000000000000 x19: 0x0000000000000000 x20: 0x0000000000000000 x21: 0x0000000000000000 x22: 0x0000000000000000 x23: 0x0000000000000000 x24: 0x0000000000000000 x25: 0x0000000000000000 x26: 0x0000000000000000 x27: 0x0000000000000000 x28: 0x0000000000000000 fp: 0x0000000000000000 lr: 0x0000000000000000 sp: 0x0000000309a22c68 pc: 0x00007ffdfff593ec cpsr: 0x00000000 far: 0x0000000000000000 esr: 0x00000000 Binary images description not available External Modification Summary: Calls made by other processes targeting this process: task_for_pid: 0 thread_create: 0 thread_set_state: 0 Calls made by this process: task_for_pid: 0 thread_create: 0 thread_set_state: 0 Calls made by all processes on this machine: task_for_pid: 0 thread_create: 0 thread_set_state: 0 VM Region Summary: Writable regions: Total=18.7M written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=18.7M(100%) VIRTUAL REGION REGION TYPE SIZE COUNT (non-coalesced) =========== ======= ======= STACK GUARD 56.0M 1 Stack 8176K 1 VM_ALLOCATE 10.5M 1 VM_ALLOCATE (reserved) 80K 3 reserved VM address space (unallocated) mapped file 4.7G 11 =========== ======= ======= TOTAL 4.8G 17 TOTAL, minus reserved VM space 4.8G 17 ======================================================================================================= Extension logs: =============== 2021-09-30 12:41:52.560376-0400 0x36151f Default 0x0 59806 0 sysextd: [com.apple.sx:XPC] client activation request for com.myorg.CMF.networkextension 2021-09-30 12:41:52.560378-0400 0x36151f Default 0x0 59806 0 sysextd: attempting to realize extension with identifier com.myorg.CMF.networkextension 2021-09-30 12:41:52.588478-0400 0x36151f Default 0x0 59806 0 sysextd: realizing target path: file:///Applications/myorgSystemExtensions.app/Contents/Library/SystemExtensions/com.myorg.CMF.networkextension.systemextension/ 2021-09-30 12:41:52.651132-0400 0x36151f Default 0x0 59806 0 sysextd: retrieved bundle code signing info: SecStaticCodeSigningInfo(entitlements: ["com.apple.developer.team-identifier": IDF12SAMPLE, "com.apple.security.app-sandbox": 1, "com.apple.developer.endpoint-security.client": 1, "com.apple.security.files.user-selected.read-write": 1, "com.apple.security.network.server": 1, "com.apple.application-identifier": IDF12SAMPLE.com.myorg.CMF.networkextension, "com.apple.security.application-groups": <__NSArrayM 0x129e06940>( 2021-09-30 12:41:52.651198-0400 0x36151f Default 0x0 59806 0 sysextd: /Applications/myorgSystemExtensions.app/Contents/Library/SystemExtensions/com.myorg.CMF.networkextension.systemextension: package type not `DEXT` 2021-09-30 12:41:52.669821-0400 0x36151f Default 0x0 59806 0 sysextd: staging extension with identifier com.myorg.CMF.networkextension 2021-09-30 12:41:52.669843-0400 0x36151f Default 0x0 59806 0 sysextd: [com.apple.sx:StateChange] extension IDF12SAMPLE com.myorg.CMF.networkextension (10.7.8/190) advancing state from realizing to staging 2021-09-30 12:41:52.684450-0400 0x36151f Default 0x0 59806 0 sysextd: [com.apple.sx:staging] staging bundle from /Applications/myorgSystemExtensions.app/Contents/Library/SystemExtensions/com.myorg.CMF.networkextension.systemextension to: /Library/SystemExtensions/.staging/D2790A91-B211-4C15-9A5D-7CB467187A07/com.myorg.CMF.networkextension.systemextension 2021-09-30 12:41:52.701262-0400 0x36151f Default 0x0 59806 0 sysextd: [com.apple.sx:StateChange] extension IDF12SAMPLE com.myorg.CMF.networkextension (10.7.8/190) advancing state from staging to validating 2021-09-30 12:41:52.732988-0400 0x36151f Default 0x0 59806 0 sysextd: making activation decision for extension with teamID teamID("IDF12SAMPLE"), identifier com.myorg.CMF.networkextension 2021-09-30 12:41:52.733036-0400 0x36151f Default 0x0 59806 0 sysextd: Activation decision for extension with teamID teamID("IDF12SAMPLE"), identifier com.myorg.CMF.networkextension is: Allow 2021-09-30 12:41:52.734773-0400 0x36151f Default 0x0 59806 0 sysextd: validating extension with identifier com.myorg.CMF.networkextension 2021-09-30 12:41:52.859332-0400 0x36151f Default 0x0 59806 0 sysextd: retrieved bundle code signing info: SecStaticCodeSigningInfo(entitlements: ["com.apple.application-identifier": IDF12SAMPLE.com.myorg.CMF.networkextension, "com.apple.developer.networking.networkextension": <__NSArrayM 0x14b1199d0>( 2021-09-30 12:41:52.859934-0400 0x36151f Default 0x0 59806 0 sysextd: [com.apple.sx:StateChange] extension IDF12SAMPLE com.myorg.CMF.networkextension (10.7.8/190) advancing state from validating to validating_by_category 2021-09-30 12:41:52.869385-0400 0x36151f Default 0x0 59806 0 sysextd: asking com.apple.system_extension.network_extension to validate extension: com.myorg.CMF.networkextension 2021-09-30 12:41:52.870260-0400 0x36151f Default 0x0 59806 0 sysextd: returning cdhash for arbitrary arch x86_64 of extension com.myorg.CMF.networkextension 2021-09-30 12:41:52.870820-0400 0x36151f Default 0x0 59806 0 sysextd: asking com.apple.system_extension.endpoint_security to validate extension: com.myorg.CMF.networkextension 2021-09-30 12:41:52.870840-0400 0x36151f Default 0x0 59806 0 sysextd: returning cdhash for arbitrary arch x86_64 of extension com.myorg.CMF.networkextension 2021-09-30 12:41:52.871129-0400 0x36151f Default 0x0 59806 0 sysextd: waiting for external validation of extension with identifier com.myorg.CMF.networkextension 2021-09-30 12:41:52.872525-0400 0x35e403 Default 0x0 486 0 nesessionmanager: [com.apple.networkextension:] Validating system extension com.myorg.CMF.networkextension 2021-09-30 12:41:52.929735-0400 0x35fb65 Error 0x280fd5 366 0 tccd: [com.apple.TCC:access] -[TCCDAccessIdentity initWithMessage:]: self.bundle=0x0, bundle:(null); for: com.myorg.CMF.networkextension with url: (null) 2021-09-30 12:41:52.933744-0400 0x36066d Error 0x280fd6 366 0 tccd: [com.apple.TCC:access] -[TCCDAccessIdentity initWithMessage:]: self.bundle=0x0, bundle:(null); for: com.myorg.CMF.networkextension with url: (null) 2021-09-30 12:41:52.935677-0400 0x35fb65 Error 0x280fd7 366 0 tccd: [com.apple.TCC:access] -[TCCDAccessIdentity initWithMessage:]: self.bundle=0x0, bundle:(null); for: com.myorg.CMF.networkextension with url: (null) 2021-09-30 12:41:52.937637-0400 0x35fb65 Error 0x280fd7 366 0 tccd: [com.apple.TCC:access] -[TCCDAccessIdentity initWithIdentifier:type:executableURL:SDKVersion:platformType:]: failed to construct bundle for: com.myorg.CMF.networkextension, URL: (null), (null) 2021-09-30 12:41:52.938584-0400 0x36151f Default 0x0 59806 0 sysextd: got reply from com.apple.system_extension.endpoint_security for com.myorg.CMF.networkextension: nil 2021-09-30 12:41:52.950959-0400 0x36151f Default 0x0 59806 0 sysextd: got reply from com.apple.system_extension.network_extension for com.myorg.CMF.networkextension: nil 2021-09-30 12:41:52.951849-0400 0x36151f Default 0x0 59806 0 sysextd: results of category validating for com.myorg.CMF.networkextension: [(nil, nil), (Optional(["MachServices": { "com.myorg.CMF.networkextension" = { NEProviderBundleIdentifier = "com.myorg.CMF.networkextension"; 2021-09-30 12:41:52.952615-0400 0x36151f Default 0x0 59806 0 sysextd: [com.apple.sx:StateChange] extension IDF12SAMPLE com.myorg.CMF.networkextension (10.7.8/190) advancing state from validating_by_category to activated_waiting_for_user 2021-09-30 12:41:52.956574-0400 0x36151f Default 0x0 59806 0 sysextd: [com.apple.sx:StateChange] extension IDF12SAMPLE com.myorg.CMF.networkextension (10.7.8/190) advancing state from activated_waiting_for_user to activated_enabling 2021-09-30 12:41:52.959452-0400 0x36151f Default 0x0 59806 0 sysextd: setting +x bit on executable in bundle file:///Library/SystemExtensions/D2790A91-B211-4C15-9A5D-7CB467187A07/com.myorg.CMF.networkextension.systemextension/ 2021-09-30 12:41:52.960507-0400 0x36151f Default 0x0 59806 0 sysextd: notifying categories that extension com.myorg.CMF.networkextension will start 2021-09-30 12:41:52.960687-0400 0x36151f Default 0x0 59806 0 sysextd: returning cdhash for arbitrary arch x86_64 of extension com.myorg.CMF.networkextension 2021-09-30 12:41:52.961013-0400 0x36151f Default 0x0 59806 0 sysextd: returning cdhash for arbitrary arch x86_64 of extension com.myorg.CMF.networkextension 2021-09-30 12:41:52.961802-0400 0x35e403 Default 0x0 486 0 nesessionmanager: [com.apple.networkextension:] System extension com.myorg.CMF.networkextension will be started 2021-09-30 12:41:52.961965-0400 0x36151f Default 0x0 59806 0 sysextd: starting extension com.myorg.CMF.networkextension via owning category com.apple.system_extension.endpoint_security 2021-09-30 12:41:52.961988-0400 0x36151f Default 0x0 59806 0 sysextd: returning cdhash for arbitrary arch x86_64 of extension com.myorg.CMF.networkextension 2021-09-30 12:41:53.014022-0400 0x36151f Default 0x0 59806 0 sysextd: returning cdhash for arbitrary arch x86_64 of extension com.myorg.CMF.networkextension 2021-09-30 12:41:53.014139-0400 0x36151f Default 0x0 59806 0 sysextd: returning cdhash for arbitrary arch x86_64 of extension com.myorg.CMF.networkextension 2021-09-30 12:41:53.016620-0400 0x36151f Default 0x0 59806 0 sysextd: extension point confirmed that extension com.myorg.CMF.networkextension is runnable 2021-09-30 12:41:53.016659-0400 0x36151f Default 0x0 59806 0 sysextd: changing state of extension com.myorg.CMF.networkextension to activated_enabled 2021-09-30 12:41:53.016683-0400 0x36151f Default 0x0 59806 0 sysextd: [com.apple.sx:StateChange] extension IDF12SAMPLE com.myorg.CMF.networkextension (10.7.8/190) advancing state from activated_enabling to activated_enabled 2021-09-30 12:41:53.016796-0400 0x35e403 Default 0x0 486 0 nesessionmanager: [com.apple.networkextension:] Adding event subscription 5896 for provider com.myorg.CMF.networkextension with extension point com.apple.networkextension.filter-packet 2021-09-30 12:41:53.019560-0400 0x35e403 Default 0x0 486 0 nesessionmanager: [com.apple.networkextension:] Adding event subscription 5896 for provider com.myorg.CMF.networkextension with extension point com.apple.networkextension.app-proxy 2021-09-30 12:41:53.019571-0400 0x35e403 Default 0x0 486 0 nesessionmanager: [com.apple.networkextension:] Adding event subscription 5896 for provider com.myorg.CMF.networkextension with extension point com.apple.networkextension.filter-data 2021-09-30 12:41:53.043913-0400 0x361f5b Default 0x0 60247 0 taskgated-helper: (ConfigurationProfiles) [com.apple.ManagedClient:ProvisioningProfiles] allowing entitlement(s) for com.myorg.CMF.networkextension due to provisioning profile (isUPP: 1) 2021-09-30 12:41:53.049345-0400 0x361f5b Error 0x0 60247 0 taskgated-helper: (ConfigurationProfiles) [com.apple.ManagedClient:ProvisioningProfiles] com.myorg.CMF.networkextension: Unsatisfied entitlements: com.apple.security.application-groups 2021-09-30 12:41:53.049346-0400 0x361f5b Error 0x0 60247 0 taskgated-helper: (ConfigurationProfiles) [com.apple.ManagedClient:ProvisioningProfiles] Disallowing: com.myorg.CMF.networkextension 2021-09-30 12:41:53.182001-0400 0x361e82 Default 0x0 364 0 syspolicyd: [com.apple.syspolicy.exec:default] GK evaluateScanResult: 2, PST: (vuid: D02BBFBD-8C4E-4182-9758-ABA266C1C869), (objid: 4035333), (team: IDF12SAMPLE), (id: com.myorg.CMF.networkextension), (bundle_id: com.myorg.CMF.networkextension), 0, 0, 1, 0, 4, 0 2021-09-30 12:41:53.215651-0400 0x35e403 Default 0x0 486 0 nesessionmanager: [com.apple.networkextension:] Found 1 (1 active) registrations for com.myorg.CMF.networkextension (com.apple.networkextension.app-proxy) 2021-09-30 12:41:53.216106-0400 0x35e403 Default 0x0 486 0 nesessionmanager: [com.apple.networkextension:] Found 1 (1 active) registrations for com.myorg.CMF.networkextension (com.apple.networkextension.app-proxy) 2021-09-30 12:41:53.216145-0400 0x35e403 Default 0x0 486 0 nesessionmanager: [com.apple.networkextension:] Found 1 (1 active) registrations for com.myorg.CMF.networkextension (com.apple.networkextension.app-proxy) 2021-09-30 12:41:53.298039-0400 0x35d650 Default 0x2817c0 56606 0 secinitd: com.myorg.CMF.networkextension[60260]: root path for bundle "<private>" of main executable "<private>" 2021-09-30 12:41:53.764412-0400 0x36200c Default 0x2817d3 4146 0 containermanagerd: [com.apple.containermanager:fs] Wrote [/private/var/root/Library/Containers/com.myorg.CMF.networkextension/.com.apple.containermanagerd.metadata.plist], length = 25432, options = 0x10000001, mode = 0666 2021-09-30 12:41:53.764578-0400 0x36200c Info 0x2817d3 4146 0 containermanagerd: [com.apple.containermanager:metadata] [u 1AC4601C-7627-414D-93A5-40B30319B3B9:p com.myorg.CMF.networkextension:c <private>(2)] Wrote metadata to [<private>]: u = <0/0/~~/2/0>, dp class = 0, managed assets = [(null)] 2021-09-30 12:41:53.766884-0400 0x36200c Default 0x2817d4 4146 0 containermanagerd: [com.apple.containermanager:fs] Wrote [/private/var/root/Library/Containers/com.myorg.CMF.networkextension/.com.apple.containermanagerd.metadata.plist], length = 25432, options = 0x10000001, mode = 0666 2021-09-30 12:41:53.767000-0400 0x36200c Info 0x2817d4 4146 0 containermanagerd: [com.apple.containermanager:metadata] [u 1AC4601C-7627-414D-93A5-40B30319B3B9:p com.myorg.CMF.networkextension:c <private>(2)] Wrote metadata to [<private>]: u = <0/0/~~/2/0>, dp class = 0, managed assets = [(null)] 2021-09-30 12:41:53.767951-0400 0x35d650 Default 0x2817c0 56606 0 secinitd: com.myorg.CMF.networkextension[60260]: AppSandbox request successful 2021-09-30 12:41:53.771561-0400 0x361fc2 Default 0x2817c2 60260 0 com.myorg.CMF.networkextension: (libsystem_containermanager.dylib) [com.apple.containermanager:xpc] Requesting container lookup; class = 2, identifier = <private>, temp = 0, create = 0, euid = 0, uid = 0, personaid = -1, type = NOPERSONA, name = <unknown> 2021-09-30 12:41:53.772845-0400 0x361fc2 Default 0x2817c1 60260 0 com.myorg.CMF.networkextension: (libsystem_containermanager.dylib) [com.apple.containermanager:unspecified] container_create_or_lookup_for_platform: success 2021-09-30 12:41:53.797252-0400 0x361fc2 Default 0x0 60260 0 com.myorg.CMF.networkextension: (libnetwork.dylib) [com.apple.network:path] nw_path_evaluator_start [C89B2E35-1E4D-4FAE-8E64-A038F1CC56BF <NULL> generic, multipath service: 1, indefinite] 2021-09-30 12:41:53.804051-0400 0x362013 Default 0x0 60260 0 com.myorg.CMF.networkextension: myorgPathMonitor : Change in NWPathMonitor observed Description = satisfied (Path is satisfied), interface: en0, ipv4, dns 2021-09-30 12:41:53.804618-0400 0x362013 Default 0x0 60260 0 com.myorg.CMF.networkextension: activeInterfaceString = en0 2021-09-30 12:41:53.804656-0400 0x362013 Default 0x0 60260 0 com.myorg.CMF.networkextension: myorgPathMonitor: en0 2021-09-30 12:41:53.806056-0400 0x361fc2 Default 0x0 60260 0 com.myorg.CMF.networkextension: Starting XPC listener for mach service group.com.myorg.endpoint.networkextensionCEF 2021-09-30 12:41:55.931122-0400 0x362014 Info 0x0 60260 0 com.myorg.CMF.networkextension: (libsystem_containermanager.dylib) [com.apple.containermanager:xpc] connection <0x7fc7dce049d0; 0x0> invalidated 2021-09-30 12:42:33.341121-0400 0x361f5b Default 0x0 60247 0 taskgated-helper: (ConfigurationProfiles) [com.apple.ManagedClient:ProvisioningProfiles] allowing entitlement(s) for com.myorg.CMF.networkextension due to provisioning profile (isUPP: 1) 2021-09-30 12:42:33.346274-0400 0x361f5b Error 0x0 60247 0 taskgated-helper: (ConfigurationProfiles) [com.apple.ManagedClient:ProvisioningProfiles] com.myorg.CMF.networkextension: Unsatisfied entitlements: com.apple.security.application-groups 2021-09-30 12:42:33.346276-0400 0x361f5b Error 0x0 60247 0 taskgated-helper: (ConfigurationProfiles) [com.apple.ManagedClient:ProvisioningProfiles] Disallowing: com.myorg.CMF.networkextension 2021-09-30 12:42:34.285199-0400 0x362ef6 Default 0x0 486 0 nesessionmanager: [com.apple.networkextension:] Found 1 (1 active) registrations for com.myorg.CMF.networkextension (com.apple.networkextension.app-proxy) 2021-09-30 12:42:34.314716-0400 0x362ef9 Default 0x0 486 0 nesessionmanager: [com.apple.networkextension:] Found 1 (1 active) registrations for com.myorg.CMF.networkextension (com.apple.networkextension.app-proxy)