“eskimo”

[quote='909137022, QuietDev842, /thread/849638?answerId=909137022#909137022, /profile/QuietDev842'] My remaining question concerns safe reuse of the VM’s backing disk [/quote] Hmmm, I’ve see that question recently as well. See VZDiskImageStorageDeviceAttachment lifecycle after guest shutdown. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

So this is a potential minefield [1], but I think you can make it work. The trick is to put the tool in an app-like wrapper [2], with its own bundle ID, and hence its own App ID, and then enable the VM Networking capability on that App ID. The tool then claims the required entitlements, with com.apple.vm.networking being a restricted entitlement that’s authorised by the tool’s provisioning profile. I tried this in my office today (on macOS 26.7.1) and it seems to work a treat. Consider this: % codesign -d --entitlements - EntitlementInheritanceExplorer.app/Contents/MacOS/EntitlementInheritanceChild.app … [Dict] [Key] com.apple.application-identifier [Value] [String] SKMME9E2Y8.com.example.apple-samplecode.Child [Key] com.apple.developer.team-identifier [Value] [String] SKMME9E2Y8 [Key] com.apple.security.app-sandbox [Value] [Bool] true [Key] com.apple.security.get-task-allow [Value] [Bool] true [Key] com.apple.security.inherit [Value] [Bool] true [Key] com.apple.vm.networking [Value] [Bool] true % security cm

I don’t think we’ll be able to answer this question as stated. You’re effectively asking us to build a secure design, or at least do a secure design review, and that’s not a function that DTS provides. Moreover, one of your key constraints is about a “trusted verifier”, and the answer to that is very much gonna depend on the policy of that party [1]. If you have specific questions about the behaviour of Apple APIs and tools, I’d be happy to look at those. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com [1] This is something I touch on in Security Audit Thoughts.

[quote='850595021, niggeGSmann, /thread/850595, /profile/niggeGSmann'] Our own report: FB[number], no response so far. [/quote] What was that bug number? Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

I don’t think I can help you very much here. Our goal here on the Apple Developer Forums is to help developers use Apple APIs and tools to create products for Apple platforms. Your questions are about the behaviour of iOS as a whole. From the perspective of a third-party developer, all of the things that you’re asking about are implementation details, that is, things that could change from release to release and thus not something they can rely on in a product. Notably, Apple Platform Security is published on the Apple Support website, not the Developer website. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

What’s the high-level goal here? Are you trying to protect yourself from programming errors in these child processes? Or are you concerned that the child processes might deliberately do bad things, and thus you’re trying to manage them in a way to prevent that? Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

This isn’t something we can help you with here on the forums. Rather, you need to seek help via official channels. For the details, see this post. [quote='850716021, nurev, /thread/850716, /profile/nurev'] I filed support case 102991640706 [/quote] The format of that case ID suggests that you’re in touch with the right folks, and I recommend that you continue escalating via that path. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

Personal Hotspot is intended to be a user-facing feature, so I recommend that developers not rely on it for their products. It’s easy to imagine scenarios, like this one, where the behaviour of Personal Hotspot changes in a way that’s compatible with standard user scenarios but breaks your product. I’ve been warning folks about this for almost a decade. Given that, DTS doesn’t support this use case, and so I have various bits of advice for you: You should repeat your test on iOS 27. If you want this behaviour to change back, you can file a bug to that effect. There are two ways to position this. If the problem doesn’t show up on iOS 27 then this seems like a 26.6.x regression. OTOH, if the problem also affects iOS 27 then you should file your bug against that, noting that you first saw the behaviour in 26.6.x. I encourage you to explore other options for integrated with your accessory. For example, you could look at AccessorySetupKit, or see if Wi-Fi Aware makes sense for you. I have more background and links

Hmmmm, I think that things might’ve ‘crossed in the mail’. What does your CloudKit Console status show now? Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

I’m gonna recommend that you start out by reading this thread. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

[quote='908828022, Pranayyyyy, /thread/848116?answerId=908828022#908828022, /profile/Pranayyyyy'] is there any solutions for this [/quote] I’m not aware of any workaround. My reading of FB24936489 is that is something that Apple will need to investigate and fix. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

[quote='908818022, baristokas, /thread/843700?answerId=908818022#908818022, /profile/baristokas'] Is this workaround available for an Individual membership without changing the account holder’s legal name? [/quote] That is my understanding, and it seems to match OneMoreBuild’s experience. [quote='908818022, baristokas, /thread/843700?answerId=908818022#908818022, /profile/baristokas'] If so, how should I request it … ? [/quote] Via our one-on-one support channel: Apple > Developer > Contact Us Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

I want to expand on this earlier response: [quote='907161022, DTS Engineer, /thread/848396?answerId=907161022#907161022'] That’s the right path forward for issues like this. [/quote] If you’re using apps that you didn’t create and see hangs, and then watchdog crashes, across a wide range of apps, that’s likely an OS-level issue, and the right path forward is, indeed, to file a bug with Apple. If you’re using a single app that’s affected by problems like this, I recommend that you reach out via the support channel for that app. In both of the above cases, there’s not much I can do to help you here on the Apple Developer Forums. Our primary goal here is to help app developers create apps for Apple platforms. We not really set up to help folks using those apps. You might have more luck over on the Apple Support Community, run by Apple Support. OTOH, if you are an app developer and you’re seeing this problem with your app, we should talk more. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical S

[quote='908972022, shivam4044, /thread/844097?answerId=908972022#908972022, /profile/shivam4044'] Can you share some insight on what this issue actually [/quote] A little. The crash seems to be caused by a concurrency issue, so we’re exploring fixes that involved adding additional serialisation (so a mutex) to that part of the code. But it’s hard to see how that info helps you, because securityd is a system-wide resource and you only control your use of it. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

OK. My view of things indicates that that, yes, your team has been successfully onboarded. That Error details were logged and redacted message is interesting. It doesn’t mean that the error is completely unavailable, but rather than this part of the code chose not to log it because it’s been logged elsewhere. If you monitor the system log for entries in the com.apple.cipherml subsystem and framework, what do you see immediately before that log entry? See Your Friend the System Log for lots of hints and tips about the system log. Also: Are you targeting iOS or macOS? And what OS version are you testing on? If you’re targeting iOS, do you have an easy way to try it on macOS? macOS has lots more logging controls than iOS (-: Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com