EndPointSecurity

Folks,


There is an example object-C code in github that shows how to use simple EndPointSecuirty framework on 10.15 and hopefully later.


I was trying get this example as a POC to see how much of those Kauth events we can get hold off and use Allow/Deny.


I tried both as a command line and as a Cocoa App ( just a simple App ) where I can put the plist keys for entitlement.


Unfortunately I am getting the same error on both trials --

(lldb) po res

ES_NEW_CLIENT_RESULT_ERR_NOT_ENTITLED


<info.plist>

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN""http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>CFBundleDevelopmentRegion</key>

<string>$(DEVELOPMENT_LANGUAGE)</string>

<key>CFBundleExecutable</key>

<string>$(EXECUTABLE_NAME)</string>

<key>CFBundleIconFile</key>

<string></string>

<key>CFBundleIdentifier</key>

<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>

<key>CFBundleInfoDictionaryVersion</key>

<string>6.0</string>

<key>CFBundleName</key>

<string>$(PRODUCT_NAME)</string>

<key>CFBundlePackageType</key>

<string>$(PRODUCT_BUNDLE_PACKAGE_TYPE)</string>

<key>CFBundleShortVersionString</key>

<string>1.0</string>

<key>CFBundleVersion</key>

<string>1</string>

<key>LSMinimumSystemVersion</key>

<string>$(MACOSX_DEPLOYMENT_TARGET)</string>

<key>NSHumanReadableCopyright</key>

<string>Copyright © 2019 Prokash.Sinha. All rights reserved.</string>

<key>NSMainStoryboardFile</key>

<string>Main</string>

<key>NSPrincipalClass</key>

<string>NSApplication</string>

<key>NSSupportsAutomaticTermination</key>

<true/>

<key>NSSupportsSuddenTermination</key>

<true/>

<key>com.apple.security.get-task-allow</key>

<true/>

<key>com.apple.developer.endpoint-security.client-allow</key>

<true/>

</dict>

</plist>

EndPointSecurity
 
 
Q