Search results for

“missing package product”

52,339 results found

Post

Replies

Boosts

Views

Activity

Reply to `sysextd` rejects new `NEFilterDataProvider` activation with "no policy" on macOS 26 — despite valid Developer ID + notarization
Had Claude analyze the sysdiagnose report. Here are the findings: Main observation: sysdiagnose analysis reveals sysextd never consults syspolicyd during activation $ sudo sysdiagnose -f ~/Desktop/ This tool generates files that allow Apple to investigate issues with your computer and help improve Apple products. The files might contain personal information found on your device or associated with your Apple Account(s), including but not limited to your name, serial numbers of your device, your device name, your attached peripheral devices, your user name, your email address and email settings, file paths, file names, Siri suggestions, your computer's IP addresses, network connection information, and profiles installed to your device. This information is used by Apple in accordance with its privacy policy (www.apple.com/privacy) and is not shared with any other company. By using this tool and sending the results to Apple, you consent to Apple using the contents of these files to improve Apple products
Feb ’26
Reply to My EndpointSecurity Client process is kicked by OS on Mac sleep/wake cycle
Splitting for length, part 2... Moving on to specifics: I need to decide whether a file-system object (from the ES message) is a Document, in my own semantics. As a general comment, you should be aware that relying on data read from the file system opens you up to a variety of TOCTU attacks. That may not be avoidable, but the risk is quite real. A document is any normal file, or -- package directories. If the file-system object exists and is a directory, and it has a file-name extension, I use something like: How is your ES client being run? Assuming you're running as a daemon, then you should not be calling NSWorkspace, as AppKit is definitely NOT daemon safe. In this particular case, it's easy to replace as isFilePackageAtPath is actually just a trivial wrapper around NSURL.getResourceValue:forKey: which is checking NSURLIsPackageKey. However, I'd strongly recommend taking a look at any other usage of NSWorkspace. If it is non-existing (to be created etc.) Then I use this heuristic and API: Have yo
Topic: App & System Services SubTopic: Core OS Tags:
Feb ’26
App Groups container data on Apple Dev account transfer
I have an iOS app with App Groups. The app uses the CallKit extension for call block functionality. All data is stored in UserDefaults(suiteName:) and FileManager.default.containerURL(forSecurityApplicationGroupIdentifier: ). I am planning to transfer this app to a different Apple Developer account and would like to clarify how App Groups behave after the transfer: Will my main app Target and CallKit Extensions keep access to the same AppGroups containers with the new Team ID? I will recreate the same AppGroups container identifiers on a new account but my concern is about Team ID change, that can lead to loss access to original containers and all data from previous Team ID. I need to clearly understand whether the app can continue accessing the existing App Group container after the Team ID changes, or if I must manually back up data before transfer and restore all data after transfer completed. As long as the App Group still exists on the original developer account and the user has not updated the
3
0
282
Feb ’26
Title: Developer ID + DNS Proxy system extension: profile mismatch for `com.apple.developer.networking.networkextension`
I’m building a macOS app with a DNS Proxy system extension for Developer ID + notarization, deployed via MDM, and Xcode fails the Developer ID Release build with a provisioning profile mismatch for com.apple.developer.networking.networkextension. Environment macOS: Sequoia (15.7.2) Xcode: 26.2 Distribution: Developer ID + notarization, deployed via MDM Host bundle ID: com.mydns.agent.MyDNSMacProxy DNS Proxy system extension bundle ID: com.mydns.agent.MyDNSMacProxy.dnsProxy Host entitlements (Release): File: MyDNSMacProxy/MyDNSMacProxyRelease.entitlements: http://www.apple.com/DTDs/PropertyList-1.0.dtd> com.apple.application-identifier B234657989.com.mydns.agent.MyDNSMacProxy com.apple.developer.networking.networkextension dns-proxy com.apple.developer.system-extension.install com.apple.developer.team-identifier B234657989 com.apple.security.app-sandbox com.apple.security.application-groups group.com.mydns.MyDNSmac keychain-access-groups B234657989.* xcodebuild -showBuildSettings -scheme MyDNSMa
4
0
199
Feb ’26
Reply to Network extension caused network access to slow down or fail.
[quote='817008021, liyuwei, /thread/817008, /profile/liyuwei'] Hopefully, it can be fixed in the official release. [/quote] Rather than hope it’s better to actually file a bug about the issue. I followed the link you posted and I don’t see a bug number there, so it’s not clear whether anyone has done that yet. If this is your product, I encourage you to file a bug about the issue yourself. See Bug Reporting: How and Why? for lots of detailed advice on how to do that. If you’re just someone using this product, I recommend that you ask the developer if they’ve filed a bug. Either way, please post the bug number here, just for the record. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Feb ’26
How can iOS developers update App Store metadata without hassle?
When creating a new App Store version to update ASO keywords and metadata, I notice that elements like the app icon and other details are missing and I am looking for a way to copy the existing metadata from the previous version. Also, is it possible to submit a new App Store version solely for ASO improvements without uploading a new build and still have the changes applied successfully.
2
0
252
Feb ’26
Status Inquiry: Apps Still in “Waiting for Review”
Hello Apple Review Team, I am writing to inquire about the review status of my two apps, which are still in the “Waiting for Review” stage: Healthoria: Health Diary – Submitted on Feb 5 at 7:01 PM OrbitGoals – Submitted on Feb 17 at 4:11 PM Could you please provide an update on the expected review timeline? I want to ensure there are no issues or missing information delaying the process. Thank you for your assistance. Best regards, Berkay
2
0
98
Feb ’26
Reply to Title: Developer ID + DNS Proxy system extension: profile mismatch for `com.apple.developer.networking.networkextension`
Update (MDM‑managed macOS 14.4 device): After some additional testing with our third‑party MDM, the Custom macOS app now does get installed via MDM (the notarized Developer ID PKG is assigned to a group with Install Method = MDM and Auto Deploy, and /Applications/MyProxy.app appears on the target Mac with the expected bundle id and version). However, on that MDM‑managed macOS 14.4 (Apple Silicon) device the app still cannot be launched. Finder shows a generic “MyProxy can’t be opened” error, and the process is killed immediately on launch. The key detail from the system log is that the decision is coming from the ConfigurationProfiles / MDM side rather than from Gatekeeper: taskgated-helper[…]: (ConfigurationProfiles) [com.apple.ManagedClient:ProvisioningProfiles] Disallowing com.myapp.agent.MyProxy because no eligible provisioning profiles found At the same time: spctl --assess -vvv -t exec /Applications/MyProxy.app reports source=Notarized Developer ID. codesign -dvv confirms the app is signed with
Feb ’26
Reply to My EndpointSecurity Client process is kicked by OS on Mac sleep/wake cycle
Thank you so much for the elaborate and helpful reply. I will try to address each point, to try and see how to close in on my problem. I will also attach a sample crash-report. My rule engine is very fast, based on NSPredicates over ObjC custom classes (No core-data etc.). Rule evaluation is completely internal to my daemon, no API calls and no external calls. There IS , however a stage prior to rule evaluation, where I Parse ES messages into my custom ObjC class, and in that stage there are few API calls one of which has given me grief in the past. I need to decide whether a file-system object (from the ES message) is a Document, in my own semantics. A document is any normal file, or -- package directories. If the file-system object exists and is a directory, and it has a file-name extension, I use something like: _isDocument = [[NSWorkspace sharedWorkspace] isFilePackageAtPath:_filePath ]; If it is non-existing (to be created etc.) Then I use this heuristics and API: { // non-existing directory obj
Topic: App & System Services SubTopic: Core OS Tags:
Feb ’26
Screen time API can be disabled easily
We have developed a Parental/Self control app using Screen time API. We have used individual authentication to authorize the app, using the instructions here: https://developer.apple.com/documentation/familycontrols/authorizationcenter The problem is , that individual auth can be disabled easily , by the following steps: enter Settings app. in Settings app, click on the Parental/Self control app. click to disable screen time restriction. show the device owner's face/fingerprint. (or pin code) Why is that a problem: Parental control apps, or self-control apps, are about giving control to the software, To make it hard for the user to disable the restrictions. So using the flow I have introduced above, it's super-easy for a user to disable his Parental control restrictions, which misses the entire point of Parental/Self control idea. Furthermore, not only the user have the means to unlock his screen time restrictions, he also MUST have the means to unlock it. This makes Screen time (with individual auth
16
0
6.5k
Feb ’26
Long delays in App Review
I'm reaching out here in hopes of finding some guidance regarding our app submission, which has now been in Waiting for Review status for 16 days. We submitted our app on February 9, 2026. On February 20, with no movement in sight, I submitted an expedited review request. This was followed by an email to Apple Developer Support, and then a phone call yesterday, and another this morning. To date, we have received no direct response, no update, and no change in status, from the App Review team. To be fair, the Apple Support personnel have been great, very sympathetic, and did all that they could, but could only provide limited information. Although they did confirm that the Expedited Request had been approved (progress!). This delay is particularly impactful for us. This is not a standalone digital product — the app is directly and inseparably tied to a physical hardware installation that is happening as I write this. And another planned for tomorrow. The app serves as the essential companion tool for
3
0
562
Feb ’26
Reply to Question about personal account switching to organization
You can start by signing up for a personal Apple ID and later switch to an Apple Developer account for your LLC. Here's how it generally works: Personal Apple ID: Signing up for a personal Apple ID is quick and doesn't require a DUNS number. It allows you to explore the App Store, download developer resources, and familiarize yourself with the development environment. Switching to an Apple Developer Account: Once you have your DUNS number and are ready to publish apps under your LLC, you can enroll in the Apple Developer Program. During this process, you'll be able to convert your personal Apple ID into the Apple ID for your developer account. This means you won't lose any data or settings associated with your personal account, such as purchase history or app downloads. Benefits of Waiting: If you prefer to have everything set up under your LLC's name from the start, waiting until you receive your DUNS number might make sense. This way, your developer account will reflect your business identity from
Feb ’26
localnetwork issue from local device.
We are currently experiencing an issue that occurs only on iPhone 17 models. In our app, after connecting to an external device, users can download multiple video files stored on the device. When downloading several videos consecutively, the device consistently stops receiving responses midway through the process. As a result, no response is returned, and the connection between the app and the device is eventually lost. This issue does not occur on any iPhone models prior to iPhone 17. It is reproducible across all iPhone 17 devices within our company. This is a critical issue, and we need urgent assistance. The main error logs show two patterns: • Connection loss • Timeout At the OS level, the only error codes we receive are: • -1005 (Network connection lost) • -1001 (Request timed out) Unfortunately, we are unable to obtain more detailed error information beyond these codes, which makes further debugging difficult. We have attached the relevant logs below. We would greatly appreci
2
0
201
Feb ’26
Reply to Is calling different SBApplication objects from different threads bad?
First up, on the bug side, what would be most useful now would be to capture a sysdiagnose after the crash, then upload that log to the bug. A few notes on that: The log doesn't need to be collected all that soon after the bug. I try to collect within a few minutes of the crash, but there really isn't any difference triggering within the next 15+ minutes. Eventually, we start purging log data (losing data), but I've gotten useful data out of logs that were taken hours after the event. It IS important that you not reboot the machine first. Lots of data is purged during that process, to the point where I've basically found those logs useless. PLEASE include information about WHEN the problem occurred. Even better, upload the crash log from the same crash you want to use to look at in the sysdiagnose. The log volume is so high that trying to figure out what happened without a time reference can be extremely slow and time-consuming. Similarly, the crash log should be included in the sysdiagnose, but ther
Feb ’26
Reply to `sysextd` rejects new `NEFilterDataProvider` activation with "no policy" on macOS 26 — despite valid Developer ID + notarization
Had Claude analyze the sysdiagnose report. Here are the findings: Main observation: sysdiagnose analysis reveals sysextd never consults syspolicyd during activation $ sudo sysdiagnose -f ~/Desktop/ This tool generates files that allow Apple to investigate issues with your computer and help improve Apple products. The files might contain personal information found on your device or associated with your Apple Account(s), including but not limited to your name, serial numbers of your device, your device name, your attached peripheral devices, your user name, your email address and email settings, file paths, file names, Siri suggestions, your computer's IP addresses, network connection information, and profiles installed to your device. This information is used by Apple in accordance with its privacy policy (www.apple.com/privacy) and is not shared with any other company. By using this tool and sending the results to Apple, you consent to Apple using the contents of these files to improve Apple products
Replies
Boosts
Views
Activity
Feb ’26
Reply to My EndpointSecurity Client process is kicked by OS on Mac sleep/wake cycle
Splitting for length, part 2... Moving on to specifics: I need to decide whether a file-system object (from the ES message) is a Document, in my own semantics. As a general comment, you should be aware that relying on data read from the file system opens you up to a variety of TOCTU attacks. That may not be avoidable, but the risk is quite real. A document is any normal file, or -- package directories. If the file-system object exists and is a directory, and it has a file-name extension, I use something like: How is your ES client being run? Assuming you're running as a daemon, then you should not be calling NSWorkspace, as AppKit is definitely NOT daemon safe. In this particular case, it's easy to replace as isFilePackageAtPath is actually just a trivial wrapper around NSURL.getResourceValue:forKey: which is checking NSURLIsPackageKey. However, I'd strongly recommend taking a look at any other usage of NSWorkspace. If it is non-existing (to be created etc.) Then I use this heuristic and API: Have yo
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
Feb ’26
Reply to Auto-renewable subscriptions stuck in "Developer Action Needed" - Cannot attach to binary
Update: Apple's legacy system, riddled with bugs, caused me so much trouble that even Apple's own employees couldn't fix it. In the end, I had to create new subscriptions with different product IDs and change all my code and subscriptions on Google Play because of it. 😩😪🤬🙄
Replies
Boosts
Views
Activity
Feb ’26
App Groups container data on Apple Dev account transfer
I have an iOS app with App Groups. The app uses the CallKit extension for call block functionality. All data is stored in UserDefaults(suiteName:) and FileManager.default.containerURL(forSecurityApplicationGroupIdentifier: ). I am planning to transfer this app to a different Apple Developer account and would like to clarify how App Groups behave after the transfer: Will my main app Target and CallKit Extensions keep access to the same AppGroups containers with the new Team ID? I will recreate the same AppGroups container identifiers on a new account but my concern is about Team ID change, that can lead to loss access to original containers and all data from previous Team ID. I need to clearly understand whether the app can continue accessing the existing App Group container after the Team ID changes, or if I must manually back up data before transfer and restore all data after transfer completed. As long as the App Group still exists on the original developer account and the user has not updated the
Replies
3
Boosts
0
Views
282
Activity
Feb ’26
Title: Developer ID + DNS Proxy system extension: profile mismatch for `com.apple.developer.networking.networkextension`
I’m building a macOS app with a DNS Proxy system extension for Developer ID + notarization, deployed via MDM, and Xcode fails the Developer ID Release build with a provisioning profile mismatch for com.apple.developer.networking.networkextension. Environment macOS: Sequoia (15.7.2) Xcode: 26.2 Distribution: Developer ID + notarization, deployed via MDM Host bundle ID: com.mydns.agent.MyDNSMacProxy DNS Proxy system extension bundle ID: com.mydns.agent.MyDNSMacProxy.dnsProxy Host entitlements (Release): File: MyDNSMacProxy/MyDNSMacProxyRelease.entitlements: http://www.apple.com/DTDs/PropertyList-1.0.dtd> com.apple.application-identifier B234657989.com.mydns.agent.MyDNSMacProxy com.apple.developer.networking.networkextension dns-proxy com.apple.developer.system-extension.install com.apple.developer.team-identifier B234657989 com.apple.security.app-sandbox com.apple.security.application-groups group.com.mydns.MyDNSmac keychain-access-groups B234657989.* xcodebuild -showBuildSettings -scheme MyDNSMa
Replies
4
Boosts
0
Views
199
Activity
Feb ’26
Reply to Network extension caused network access to slow down or fail.
[quote='817008021, liyuwei, /thread/817008, /profile/liyuwei'] Hopefully, it can be fixed in the official release. [/quote] Rather than hope it’s better to actually file a bug about the issue. I followed the link you posted and I don’t see a bug number there, so it’s not clear whether anyone has done that yet. If this is your product, I encourage you to file a bug about the issue yourself. See Bug Reporting: How and Why? for lots of detailed advice on how to do that. If you’re just someone using this product, I recommend that you ask the developer if they’ve filed a bug. Either way, please post the bug number here, just for the record. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Replies
Boosts
Views
Activity
Feb ’26
How can iOS developers update App Store metadata without hassle?
When creating a new App Store version to update ASO keywords and metadata, I notice that elements like the app icon and other details are missing and I am looking for a way to copy the existing metadata from the previous version. Also, is it possible to submit a new App Store version solely for ASO improvements without uploading a new build and still have the changes applied successfully.
Replies
2
Boosts
0
Views
252
Activity
Feb ’26
Status Inquiry: Apps Still in “Waiting for Review”
Hello Apple Review Team, I am writing to inquire about the review status of my two apps, which are still in the “Waiting for Review” stage: Healthoria: Health Diary – Submitted on Feb 5 at 7:01 PM OrbitGoals – Submitted on Feb 17 at 4:11 PM Could you please provide an update on the expected review timeline? I want to ensure there are no issues or missing information delaying the process. Thank you for your assistance. Best regards, Berkay
Replies
2
Boosts
0
Views
98
Activity
Feb ’26
Reply to Title: Developer ID + DNS Proxy system extension: profile mismatch for `com.apple.developer.networking.networkextension`
Update (MDM‑managed macOS 14.4 device): After some additional testing with our third‑party MDM, the Custom macOS app now does get installed via MDM (the notarized Developer ID PKG is assigned to a group with Install Method = MDM and Auto Deploy, and /Applications/MyProxy.app appears on the target Mac with the expected bundle id and version). However, on that MDM‑managed macOS 14.4 (Apple Silicon) device the app still cannot be launched. Finder shows a generic “MyProxy can’t be opened” error, and the process is killed immediately on launch. The key detail from the system log is that the decision is coming from the ConfigurationProfiles / MDM side rather than from Gatekeeper: taskgated-helper[…]: (ConfigurationProfiles) [com.apple.ManagedClient:ProvisioningProfiles] Disallowing com.myapp.agent.MyProxy because no eligible provisioning profiles found At the same time: spctl --assess -vvv -t exec /Applications/MyProxy.app reports source=Notarized Developer ID. codesign -dvv confirms the app is signed with
Replies
Boosts
Views
Activity
Feb ’26
Reply to My EndpointSecurity Client process is kicked by OS on Mac sleep/wake cycle
Thank you so much for the elaborate and helpful reply. I will try to address each point, to try and see how to close in on my problem. I will also attach a sample crash-report. My rule engine is very fast, based on NSPredicates over ObjC custom classes (No core-data etc.). Rule evaluation is completely internal to my daemon, no API calls and no external calls. There IS , however a stage prior to rule evaluation, where I Parse ES messages into my custom ObjC class, and in that stage there are few API calls one of which has given me grief in the past. I need to decide whether a file-system object (from the ES message) is a Document, in my own semantics. A document is any normal file, or -- package directories. If the file-system object exists and is a directory, and it has a file-name extension, I use something like: _isDocument = [[NSWorkspace sharedWorkspace] isFilePackageAtPath:_filePath ]; If it is non-existing (to be created etc.) Then I use this heuristics and API: { // non-existing directory obj
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
Feb ’26
Screen time API can be disabled easily
We have developed a Parental/Self control app using Screen time API. We have used individual authentication to authorize the app, using the instructions here: https://developer.apple.com/documentation/familycontrols/authorizationcenter The problem is , that individual auth can be disabled easily , by the following steps: enter Settings app. in Settings app, click on the Parental/Self control app. click to disable screen time restriction. show the device owner's face/fingerprint. (or pin code) Why is that a problem: Parental control apps, or self-control apps, are about giving control to the software, To make it hard for the user to disable the restrictions. So using the flow I have introduced above, it's super-easy for a user to disable his Parental control restrictions, which misses the entire point of Parental/Self control idea. Furthermore, not only the user have the means to unlock his screen time restrictions, he also MUST have the means to unlock it. This makes Screen time (with individual auth
Replies
16
Boosts
0
Views
6.5k
Activity
Feb ’26
Long delays in App Review
I'm reaching out here in hopes of finding some guidance regarding our app submission, which has now been in Waiting for Review status for 16 days. We submitted our app on February 9, 2026. On February 20, with no movement in sight, I submitted an expedited review request. This was followed by an email to Apple Developer Support, and then a phone call yesterday, and another this morning. To date, we have received no direct response, no update, and no change in status, from the App Review team. To be fair, the Apple Support personnel have been great, very sympathetic, and did all that they could, but could only provide limited information. Although they did confirm that the Expedited Request had been approved (progress!). This delay is particularly impactful for us. This is not a standalone digital product — the app is directly and inseparably tied to a physical hardware installation that is happening as I write this. And another planned for tomorrow. The app serves as the essential companion tool for
Replies
3
Boosts
0
Views
562
Activity
Feb ’26
Reply to Question about personal account switching to organization
You can start by signing up for a personal Apple ID and later switch to an Apple Developer account for your LLC. Here's how it generally works: Personal Apple ID: Signing up for a personal Apple ID is quick and doesn't require a DUNS number. It allows you to explore the App Store, download developer resources, and familiarize yourself with the development environment. Switching to an Apple Developer Account: Once you have your DUNS number and are ready to publish apps under your LLC, you can enroll in the Apple Developer Program. During this process, you'll be able to convert your personal Apple ID into the Apple ID for your developer account. This means you won't lose any data or settings associated with your personal account, such as purchase history or app downloads. Benefits of Waiting: If you prefer to have everything set up under your LLC's name from the start, waiting until you receive your DUNS number might make sense. This way, your developer account will reflect your business identity from
Replies
Boosts
Views
Activity
Feb ’26
localnetwork issue from local device.
We are currently experiencing an issue that occurs only on iPhone 17 models. In our app, after connecting to an external device, users can download multiple video files stored on the device. When downloading several videos consecutively, the device consistently stops receiving responses midway through the process. As a result, no response is returned, and the connection between the app and the device is eventually lost. This issue does not occur on any iPhone models prior to iPhone 17. It is reproducible across all iPhone 17 devices within our company. This is a critical issue, and we need urgent assistance. The main error logs show two patterns: • Connection loss • Timeout At the OS level, the only error codes we receive are: • -1005 (Network connection lost) • -1001 (Request timed out) Unfortunately, we are unable to obtain more detailed error information beyond these codes, which makes further debugging difficult. We have attached the relevant logs below. We would greatly appreci
Replies
2
Boosts
0
Views
201
Activity
Feb ’26
Reply to Is calling different SBApplication objects from different threads bad?
First up, on the bug side, what would be most useful now would be to capture a sysdiagnose after the crash, then upload that log to the bug. A few notes on that: The log doesn't need to be collected all that soon after the bug. I try to collect within a few minutes of the crash, but there really isn't any difference triggering within the next 15+ minutes. Eventually, we start purging log data (losing data), but I've gotten useful data out of logs that were taken hours after the event. It IS important that you not reboot the machine first. Lots of data is purged during that process, to the point where I've basically found those logs useless. PLEASE include information about WHEN the problem occurred. Even better, upload the crash log from the same crash you want to use to look at in the sysdiagnose. The log volume is so high that trying to figure out what happened without a time reference can be extremely slow and time-consuming. Similarly, the crash log should be included in the sysdiagnose, but ther
Replies
Boosts
Views
Activity
Feb ’26