Post

Replies

Boosts

Views

Activity

Run suid program (without privilege) in sandbox?
Is there a feature available to sandbox profiles that would allow a suid program (in this particular case, /bin/ps) to be exec-ed without privilege (with the uid of exec-ing process instead of uid of file owner.) Currently, trying to launch gives error: sandbox-exec: execvp() of '/bin/ps' failed: Operation not permitted With logged message: deny(1) forbidden-exec-sugid If I make a copy of /bin/ps, thus removing the suid-bit, it does run ok in the sandbox. However, it would be more convent if I could just tell the sandbox environment to allow the exec without elevating privilege. Yes, I understand sandbox-exec has been DEPRECATED for quite a while, and the profile language is "Apple System Private Interface", but I thought I'd ask anyway. Thanks.
2
0
1.5k
Sep ’21
libMobileGestalt MGIOMFBSupport.c:145: screen parameters are unexpected
These messages are appearing in the text output of the debug area when running my metal app under Simulator for AppleTV 4K. 2020-08-10 22:30:57.937497-0700 Mandelbits[3074:322942] libMobileGestalt MGIOMFBSupport.c:145: screen parameters are unexpected: MGScreenClass3840x2160x2x80 SCREENTYPE(3840,2160,2, 80) 2020-08-10 22:30:57.937639-0700 Mandelbits[3074:322942] screen parameters are unexpected: MGScreenClass3840x2160x2x80 SCREENTYPE(3840,2160,2, 80) The message changes to this for "AppleTV 4K (1080p)". 2020-08-10 22:50:04.430681-0700 Mandelbits[3316:340765] libMobileGestalt MGIOMFBSupport.c:145: screen parameters are unexpected: MGScreenClass1920x1080x1x40 SCREENTYPE(1920,1080,1, 40) 2020-08-10 22:50:04.430870-0700 Mandelbits[3316:340765] screen parameters are unexpected: MGScreenClass1920x1080x1x40 SCREENTYPE(1920,1080,1, 40) Any idea what these mean? App still starts up and runs. Environment: Simulator 12.0 (940.14), Xcode 12.0 beta 4 (12A8179i), macOS 10.15.6 (19G73).
8
0
2.4k
Feb ’21