Post not yet marked as solved
Hi,
Our product package signing started failing out of the blue earlier today (still happening)
2022-03-09 14:33:24.782 productsign[91848:49800859] CMS signature encoding failed: A timestamp was expected but was not found. (-67882)
We were wondering if the timestamp server is down or experiencing issues? What could be an issue here?
Thanks.
Best regards, Arthur
Post not yet marked as solved
Hello!
The documentation on ATS refers to "apps and app extensions" as scope.
https://developer.apple.com/documentation/security/preventing_insecure_network_connections
Does this limit its availability to apps that are running in the user context?
The question is: do we get ATS protection in case of a launchd job? Let's say there is a launchd job (running in uid 1 context). It initiates network requests using URLSession API. Does it get ATS by default? Is there a way to validate that?
Is it correct to assume that high level network API such as URLSession use ATS by default?
Thanks.
Best regards, Arthur
Hello,
We have an AV product for macOS that uses Endpoint Security APIs for authorizing various system activity.
The latest Monterey beta 6 introduced support for an event called "ES_EVENT_TYPE_AUTH_COPYFILE" which according to the release notes should be triggered for "copyfile" system call.
The problem is I cannot seem to find any activity that actually ends up triggering this system call while using the latest Monterey beta.
"/bin/cp" generates two open system calls
More high level NSFileManager "copyItemAtPath:toPath:error:" generates a clone event
There is a "copyfile" C function that is defined in "copyfile.h" also generates two separate open calls.
Did someone figure out how to trigger it or could someone from Apple give a comment?
We'd usually ask such question via DTS ticket but it's about beta software so we decided to start her on the forum. Thanks.
Best regards, Arthur
Hello!
We rely on applications launch date information provided by NSWorkspace. Our main applications of interest are browsers (Safari, Chrome, Firefox).
We've noticed that NSWorkspace on Big Sur returns "nil" for all running applications including those that we are primarily interested in. This can be easily reproduced with the code sample below
[[[NSWorkspace sharedWorkspace] runningApplications] enumerateObjectsUsingBlock:^(NSRunningApplication * _Nonnull obj, NSUInteger idx, BOOL * _Nonnull stop) {
NSLog(@"App %@ launched at %@", obj.bundleIdentifier, obj.launchDate);
}];
The issue is observed in all released beta builds of Big Sur including the latest beta 4.
Submitted the same report in feedback assistant: FB8098936
Will this be fixed? Or we should start thinking of alternative approaches for getting the launch date?
Thanks.
Best regards,
Arthur
ArthurValiev.