Post

Replies

Boosts

Views

Activity

Reply to Endpoint Security Framework and signals
AH HA! I have found two problems! I had it set to cache the results, which resulted in no more auth messages. I convert the messages to an ObjC class, and for the process initialization, I'd forgotten to initialize the pid property. This resulted in all processes having a pid of 0, which of course I skipped because that's the kernel! (I allow launchd, aka pid 1, to send signals. Things get bothersome otherwise.) PEBKAC FOR THE WIN! πŸ˜„ This took a long time to diagnose because it's a bad idea to use breakpoints on a process that is using ESF for authorizations.
Jan ’25
Reply to Notarization service issue
Using the history subcommand, I do see the entry for fbcbefe7-39cc-4b18-b31f-ef49397e0af7. The delay started today; one succeeded at createdDate: 2025-01-15T09:01:34.277Z id: 8a48b1d3-cdb3-4e38-a445-5f0518e8b0ba name: foo.pkg status: Accepted which is also today. I am fairly curious about this learning...
Jan ’25
Reply to Endpoint Security Framework and signals
I was very curious why I'd never seen eslogger and it turns out it's because it was introduced more recently than my older systems. πŸ˜„ Confirmed that it shows the expected behavior on one machine, so I'll be poking at it. At least I know that it does show SIGKILL actions. Although I guess that's notification, not authorization...
Dec ’24
Reply to SwiftUI and dragging a file onto the app icon
Ok, MAYBE never mind: this may be some weirdness between LS and running under Xcode -- if I run the built app manually, outside of Xcode, then it works on the first attempt. At least on one attempt, anyway; need to poke at it a lot more. Ironically discovered whilst filing a feedback and verifying each of the steps.
Dec ’24