How to apply for permission to read process memory

Question

hailong199933 OP

Created Dec ’24

Replies 3

Boosts 0

Participants 2

I saw that the vmmap program uses task-read_for_pid, and I want to use the task-read_for_pid export function to read process memory and check for any issues, but I don't have permission. How can I apply for it

Boost

Answer 1

DTS Engineer OP

Apple

Dec ’24

There is no general-purpose mechanism for third-party programs to read the memory of arbitrary other processes. However, there are some solutions that work for specific goals. If you can explain more about your high-level goal, I should be able to advise you further.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

1

Answer 2

hailong199933 OP

Dec ’24

I want to use task_for_pid to monitor employees using IM software for enterprise work communication to send out files and detect data leaks

0

Answer 3

hailong199933 OP

2w

i use


<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

    <key>com.apple.security.cs.debugger</key>

    <true/>

    <key>com.apple.private.security.clear-library-validation</key>

    <true/>

</dict>

</plist>

Can I use the developer certificate or enterprise certificate issued by Apple to call the normal task_for_pid after applying

0