eskimo

What platform are you on? And what type of app extensions are you building? This matters because: You tagged your thread with Network Extension, which suggests you’re building an NE provider. On macOS, the keychain is weird. See TN3137 On Mac keychain APIs and implementations. And NE providers can be packaged as either an appex or a sysex. See TN3134 Network Extension provider deployment. And that affects how you should interact with the keychain. See Network Extension Provider Packaging. So, if you’re on iOS or one of its child platforms, we can focus on the appex side of this. OTOH, if you’re on macOS, things get more complex |-: Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

I wanted to wade in to the logging side of this. You wrote: print(…) When debugging code that might run in the background, I recommend that you use the system log rather than print(…). The print(…) routine prints to stdout, which you’ll only see if you ran your app from Xcode. OTOH, the system log lets you monitor your logging regardless of how your app was launched. I have a lot more info about the system log in Your Friend the System Log. I also have general info about debugging code that runs in the background in Testing and Debugging Code Running in the Background. Not all of that applies to your case, but it’s a good place to start. os_log(.debug, perform boot: (item)) Is there a reason you’re not using the new Logger API? It’s much nicer. [quote='868100022, Eloo, /thread/809001?answerId=868100022#868100022, /profile/Eloo'] the logs appear to be uneven [/quote] Right. The system log is a limited resource. If you log to it too quickly, you will run into problems. In your specific example, logging 10,001 l

Yeah, that would be cool. [quote='809020021, matthewruzzi, /thread/809020, /profile/matthewruzzi'] FB21241023 [/quote] Thanks for filing that. In the meantime, you can work around this by posting the video to your favourite file sharing site and then posting a link to it here. If you run into problems posting the link, see tip 14 in Quinn’s Top Ten DevForums Tips. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

This alert is part of the app group container protection feature. For more background, see: The WWDC video I linked to in Trusted Execution Resources App Groups: macOS vs iOS: Working Towards Harmony [quote='808931021, Ankita13188, /thread/808931, /profile/Ankita13188'] I am attempting to read and write data to an Office Group Container [/quote] I don’t understand “Office Group Container”. Is this a container for an app group from some other third-party developer? Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

[I know you’ve seen this already but I want to post it here just in case other folks stumble across this thread.] Regarding the Team is not yet configured for notarization error, I’ve said all that I can say about that issue in this post. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

Let’s focus this discussion on your other thread. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

[quote='867839022, MoLotus, /thread/808485?answerId=867839022#867839022, /profile/MoLotus'] I clicked 'Accepted Answer' by mistake and can't undo it? [/quote] Indeed )-: See tip 12 in Quinn’s Top Ten DevForums Tips for more about that. [quote='867839022, MoLotus, /thread/808485?answerId=867839022#867839022, /profile/MoLotus'] Note that the comment facility here is failing to post comments [/quote] Well, they post but there’s a bug causing them to not show up immediately (i. 98940414)-: In general, I recommend that you reply as a reply. See tip 5 for more on that. Coming back to your technical issue, this seems to be working for me in Xcode 26.1. Here’s what I did: Using Xcode 26.1 on macOS 15.7.1, I created a new project from the macOS > Command Line Tool template, selecting C as the language. I changed main.c to this: #include #include __attribute__((constructor(200))) void foo(void); __attribute__((constructor(101))) void bar(void); void foo(void) { printf(foon); } void bar(void) { printf(barn); } int

While FB12894500 isn’t yet fixed, for the last few years we’ve had an alternative. If you accidentally accept the wrong answer, you can ask an Apple person to mark a different answer as Apple Recommended. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

[quote='867863022, pepipox, /thread/808699?answerId=867863022#867863022, /profile/pepipox'] using the Personal VPN API [/quote] Thanks for confirming that. [quote='867863022, pepipox, /thread/808699?answerId=867863022#867863022, /profile/pepipox'] The swift app runs as a headless app, no need for a GUI. [/quote] OK. But things are not that simple on macOS. A program runs in an execution context based on how it’s launched. For example, a command-line tool run from Terminal gets a very different execution context from that same command-line tool run as a launchd daemon. And this execution context is critical when you start doing things like modifying the keychain (which is what you’re doing when you spawn the security tool). We discuss this in gory detail in TN2083 Daemons and Agents. It’s very (very very)-: old, but the core concepts are still valid. So what sort of user experience are you aiming for here? Specifically, are you expecting this stuff to function when no one is logged in to the Mac? Share and Enj

[quote='867926022, faisalIkwal, /thread/808339?answerId=867926022#867926022, /profile/faisalIkwal'] could you please suggest what specific exceptions we should consider adding? [/quote] I kinda already did. My recommendation is that you create test versions of your providers: For the transparent proxy and filter providers, just return false from the handle-new-flow method. For the DNS proxy provider, implement a minimal pass through. Then deploy various combinations of these to see which ones reproduce the problem. If, for example, you can reproduce the problem with just this dummy transparent proxy provider enabled, then you know that’s nothing to do with your code — it’s hard to mess up a return false (-: — and it’s time for a bug report. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

[quote='808040021, JianbinWu, /thread/808040, /profile/JianbinWu'] even if no IP has been given to the iPhone. [/quote] Given to the iPhone by what? A DHCP server? If that’s what you’re concerned about then I think you’re missing a key point. DHCP is primarily relevant to IPv4 [1]. Assuming the link is up, the interface will have an IPv6 link-local address [1]. I recommend that you read through the posts referenced by Extra-ordinary Networking. They explain a lot of the backstory to this. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com [1] Yeah, there’s DHCPv6, but it’s not the primary mechanism for IPv6 address assignment. [2] It’s likely also get an IPv4 link-local address, per RFC 3927, but that’s not nearly as straightforward.

[quote='867816022, MasterYourSelf, /thread/806764?answerId=867816022#867816022, /profile/MasterYourSelf'] Given that all three extensions are active, is there a predictable order in which the network traffic will hit the providers? [/quote] Last I checked: Between extension types, the order is stable [1]. Within an extension type, the order is generally not stable, although it can be configured by a site manager [2]. [quote='867816022, MasterYourSelf, /thread/806764?answerId=867816022#867816022, /profile/MasterYourSelf'] Is there a recommended … sequence for activating these three specific managers [/quote] I’m not aware of any guidelines here. The system should tolerate you enabling these configurations in any order. [quote='867816022, MasterYourSelf, /thread/806764?answerId=867816022#867816022, /profile/MasterYourSelf'] When the network is under high load, is there a risk that one provider [might] miss network events … ? [/quote] I don’t think so. These are all socket filters — they live between BSD Sockets

[quote='867789022, AckwelFoley, /thread/808594?answerId=867789022#867789022, /profile/AckwelFoley'] any chance you could give some details on how FSKit knows that a particular FSKit module is enabled for a given user [/quote] No, sorry, these are very much implementation details and thus not something I can encourage folks to rely on. IMPORTANT macOS works hard to prevent users from running code unexpectedly, hence the existence of System Settings > General > Login Items & Extensions. Given that, it wouldn’t surprise me if the files that back these setting were protected by MAC [1], or become so protected in the future. Regarding your overall goal, there’s a deeper architectural concern in play. Settings like this are usually stored in the user’s home directory, which results in an a clear chicken’n’egg problem if your FSKit module is responsible for mounting that home directory. Hence my suggestion for an ER, and specifically the option to use a sysex, which is global to the system as a whole. Shar

[quote='867803022, teapeagee, /thread/808618?answerId=867803022#867803022, /profile/teapeagee'] Can you recommend an endpoint security client? [/quote] No, sorry. I support the API [1] but I don’t have any practical experience with the resulting products. You might have more luck asking this question over in the Apple Support Community, run by Apple Support, and specifically in the Business and Education topic area. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com [1] Well, these days Kevin handles most of the ES questions.

Sorry, I meant the My Certificates tab. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com