Mac app(ProcessMonitor) crashing with EXC_CRASH (Code Signature Invalid)

When I build and run the source code of "ProcessMonitor", I get the following error.
Certificate and provisioning profiles are created for this app.
The results will not change even if you download and execute the notarized app.
Please tell me how to run the app.

ProcessMonitor：
objective-see - products utilities - ProcessMonitor

Exception Type:       EXCCRASH (Code Signature Invalid)
Exception Codes:    0x0000000000000000, 0x0000000000000000
Exception Note:      EXCCORPSE_NOTIFY
Termination Reason:  Namespace CODESIGNING, Code 0x1
XCode:11.5(11E608c)
MacOS:10.15.5(19F101)
Up vote post of TSawano Down vote post of TSawano
1.1k views
Posted by
TSawano
Reply
Add a Comment

Replies

Crashes like this are usually the result of one of two problems:

  • You’ve signed the app with a code signing identity that’s incompatible with the environment in which you’re trying to run it (for example, you’re trying to run something signed with a distribution identity).

  • You’re using invalid entitlements (either completely invalid, or entitlements that aren’t allowlisted by your provisioning profile).

To dig into this, run the following commands:

Code Block  
% codesign -v -vvv /path/to/your.app
% codesign -d -vvv --entitlements :- /path/to/your.app


Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"
Posted by
eskimo
Post not yet marked as solved Up vote reply of eskimo Down vote reply of eskimo
Add a Comment
As a result of executing the command, the following results were obtained.
My MacOS version is 10.15.5, but I'm worried that "Runtime Varsion" is 10.15.4.
Is there any other place where you might have a problem?

$ codesign -v -vvv /my.app/

$ codesign -d -vvv --entitlements :- /my.app/


Posted by
TSawano
Up vote reply of TSawano Down vote reply of TSawano
Add a Comment
Your app is using a number of entitlements that must be allowedlisted by a provisioning profile:

  • com.apple.application-identifier and com.apple.developer.team-identifier are constrained entitlements. They must be allowlisted by a profile but anyone can create such a profile.

  • com.apple.developer.endpoint-security.client is a special entitlement. You must be granted access to this by Apple.

Have you applied for and been granted access to com.apple.developer.endpoint-security.client? Have you created your profile based on that? Is it embedded correctly? Does that profile allowlist all of these entitlements?

You can dump the profile as follows:

Code Block  
% security cms -D -i /path/to/your.app/Contents/embedded.provisionprofile


Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"
Posted by
eskimo
Up vote reply of eskimo Down vote reply of eskimo
Add a Comment
I submitted a request for "com.apple.developer.endpoint-security.client" to Apple a month ago, but I have no answer.
Will it take time to apply?
Posted by
TSawano
Post not yet marked as solved Up vote reply of TSawano Down vote reply of TSawano
Add a Comment

Will it take time to apply?

It can take a while. Keep in mind that WWDC happened during that month, and that punches a huge hole in everyone’s schedule. Give it a couple more weeks and then post back here if your request has gone unanswered.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"
Posted by
eskimo
Up vote reply of eskimo Down vote reply of eskimo
Add a Comment
@eskimo :

How to apply for and been granted access to com.apple.developer.endpoint-security.client?

Posted by
SamAppLet
Up vote reply of SamAppLet Down vote reply of SamAppLet
Add a Comment
I responded in the other place where you asked this.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"
Posted by
eskimo
Up vote reply of eskimo Down vote reply of eskimo
Add a Comment

Give it a couple more weeks and then post back here if your request has gone unanswered.

I waited for two weeks, but I didn't get in touch.
I applied on 06/18/2020 and received the email accepted by "Follow-up: 738155268" on that day.
Should I apply again?
Posted by
TSawano
Up vote reply of TSawano Down vote reply of TSawano
Add a Comment

Should I apply again?

No. Creating more requests generally makes things worse. At this point you just have to wait for the ES folks to process your request.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"
Posted by
eskimo
Up vote reply of eskimo Down vote reply of eskimo
Add a Comment