Hi, According to https://developer.apple.com/videos/play/wwdc2022/10096/, agent user can disable login item on Ventura. In enterprise environment, IT admin may want some processes are always running in launch daemon. Is there a MDM rule to forbidden agent user to disable special login item? Thank you!

Hi Heap is less than footprint. Why it happen?And how can I get the detail memory info beside heap? Thank you!

Hi, I use following code to add listener for kCMIODevicePropertyDeviceIsRunningSomewhere to get using camera notification. opa.mSelector = kCMIODevicePropertyDeviceIsRunningSomewhere;             opa.mScope = kCMIOObjectPropertyScopeGlobal;             opa.mElement = kCMIOObjectPropertyElementMaster;             result = CMIOObjectAddPropertyListenerBlock(CMIOObjectID(camera), &opa,NULL, CameralistenerBlock); This code can work as expected before. But when I test it with macOS 12 on M1, the listener callback block is invoked by mistake when I open Music.app or iTunes. When I run my application for two processes, the 1st process will get listener callback when the 2nd process invoke CMIOObjectAddPropertyListenerBlock. Is it a bug of macOS 12? Or spec is changed? Any suggestion? Thank you very much!

Hi, I have a endpoint security process on macOS 11.4 and it cost 900+M memory. I get the memory graph and find Accounts framework alloc many memory   Dirty      Clean  Reclaimable    Regions    Category     ---        ---          ---        ---    ---  925 MB        0 B          0 B      14012    Accounts framework Some traceTrees are like these:     3 VM: Accounts framework  0x130e78000-0x130e89000 [V=68K] r--/r--         3 Region Accounts framework  region + 0 0x121ff0000         2 0x7fcc3d023a00 [1536]  +1341:  0x7fcc3d023f3d --> offset 65536         + 1 Region __DATA_DIRTY /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation __DATA_DIRTY __data: '__CFRuntimeClassTable' + 2224 0x7fff80292090         + 1 Region __DATA_DIRTY /System/Library/Frameworks/Security.framework/Versions/A/Security __DATA_DIRTY __bss: 'Security::KeychainCore::gTypes()::nexus' 0x7fff803182a0         1 0x7fcc3be10650 [784]   +477:  0x7fcc3be1082d --> offset 65663           1 <icu::SharedDateFormatSymbols 0x7fcc3d02c000> [1536]   +128:  0x7fcc3d02c080 --> offset 8             1 0x7fcc3c813200 [3072]  +2480:  0x7fcc3c813bb0               1 0x7fcc3bf056a0 [80]     +0:  0x7fcc3bf056a0                 1 <icu::UnifiedCache 0x7fcc3bf05660> [64]     +8:  0x7fcc3bf05668                   1 Region __DATA_DIRTY /usr/lib/libicucore.A.dylib __DATA_DIRTY __bss + 3552 0x7fff8081cf30     2 VM: Accounts framework  0x112bb2000-0x112bc3000 [V=68K] r--/r--         2 Region Accounts framework  region + 0 0x110ff0000         2 0x7fcc3be06ea0 [432]   +197:  0x7fcc3be06f65 --> offset 65663           1 Region __DATA_DIRTY /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation __DATA_DIRTY __data: '__CFRuntimeClassTable' + 2176 0x7fff80292060           1 Region __DATA_DIRTY /System/Library/Frameworks/Security.framework/Versions/A/Security __DATA_DIRTY __bss: 'Security::CodeSigning::gCFObjects' 0x7fff803180d8 Is this a system bug? And what is VM: Accounts framework?

Hi guys Following this topic : https://developer.apple.com/forums/thread/654443 I test this in macOS 14 beta, audit can't work now. Is it expected or a bug? If it is expected, is there any announcement ? Thank you! Command return error: sudo audit -i Error sending trigger: (ipc/send) invalid destination port