Post

Replies

Boosts

Views

Activity

sysextd: "no policy, cannot allow apps outside /Applications" - NEFilterDataProvider system extension on macOS 26
I'm developing a macOS security tool using NEFilterDataProvider as a system extension. On macOS 26 beta (25E241), sysextd consistently rejects my extension with: sysextd: no policy, cannot allow apps outside /Applications Configuration: App installed in /Applications/ Signed with Developer ID Application (693DSH8GN5) Entitlement: com.apple.developer.networking.networkextension = content-filter-provider com.apple.developer.system-extension.install = true Developer Mode enabled on test machine Comparison with Little Snitch: Little Snitch runs correctly on the same machine. Key differences I found: Little Snitch uses content-filter-provider-systemextension instead of content-filter-provider Little Snitch has com.apple.security.app-sandbox = false Both signed with Developer ID Application When I switch to content-filter-provider-systemextension, Xcode rejects every provisioning profile because none match that entitlement value, and the Developer Portal doesn't expose fine-grained control over the Network Extensions array values. Questions Is content-filter-provider-systemextension the correct entitlement for system extensions on macOS 26? How should the provisioning profile be configured to support it? Is there a known sysextd issue on macOS 26 beta causing this regardless of configuration? Is there - somewhere! - a guide on how to build such an extension? Thanks in advance for your help.
2
0
80
Mar ’26
Unexpected Segmentation fault
Hi guys, I am working with NASM version 2.15.05 and ld64-711 BUILD 21:57:11 on a MacOS Monterey. I wrote a simple 'Hello World' program in assembly and I receive a segmentation fault I cannot really understand. Would you be so kind to help me? The code is: global _main ; in the .text section, we define the program section .text _main: mov rax, 0x2000004 mov rdi, 1 mov rsi, helloMessage mov rdx, helloMessage.size syscall mov rax, 0x2000004 xor rdi, rdi syscall section .data helloMessage: db "Hello, World!", 10 .size equ $ - helloMessage I compile it as follows: gbiondo@tripleX ASM % nasm -f macho64 hello.asm and I link it like this: gbiondo@tripleX ASM % ld hello.o -o hello1 -lc -L /Library/Developer/CommandLineTools/SDKs/MacOSX.sdk/usr/lib When I run the executable, I get: gbiondo@tripleX ASM % ./hello1 Hello, World! zsh: segmentation fault ./hello1 Coming from the Linux ASM, I had these problems when I forgot the syscall to exit (in this case, the second block, starting with mov rax, 0x2000004) and ending with the syscall instruction, but here? What happens? Thanks.
0
0
618
Mar ’22
sysextd: "no policy, cannot allow apps outside /Applications" - NEFilterDataProvider system extension on macOS 26
I'm developing a macOS security tool using NEFilterDataProvider as a system extension. On macOS 26 beta (25E241), sysextd consistently rejects my extension with: sysextd: no policy, cannot allow apps outside /Applications Configuration: App installed in /Applications/ Signed with Developer ID Application (693DSH8GN5) Entitlement: com.apple.developer.networking.networkextension = content-filter-provider com.apple.developer.system-extension.install = true Developer Mode enabled on test machine Comparison with Little Snitch: Little Snitch runs correctly on the same machine. Key differences I found: Little Snitch uses content-filter-provider-systemextension instead of content-filter-provider Little Snitch has com.apple.security.app-sandbox = false Both signed with Developer ID Application When I switch to content-filter-provider-systemextension, Xcode rejects every provisioning profile because none match that entitlement value, and the Developer Portal doesn't expose fine-grained control over the Network Extensions array values. Questions Is content-filter-provider-systemextension the correct entitlement for system extensions on macOS 26? How should the provisioning profile be configured to support it? Is there a known sysextd issue on macOS 26 beta causing this regardless of configuration? Is there - somewhere! - a guide on how to build such an extension? Thanks in advance for your help.
Replies
2
Boosts
0
Views
80
Activity
Mar ’26
Unexpected Segmentation fault
Hi guys, I am working with NASM version 2.15.05 and ld64-711 BUILD 21:57:11 on a MacOS Monterey. I wrote a simple 'Hello World' program in assembly and I receive a segmentation fault I cannot really understand. Would you be so kind to help me? The code is: global _main ; in the .text section, we define the program section .text _main: mov rax, 0x2000004 mov rdi, 1 mov rsi, helloMessage mov rdx, helloMessage.size syscall mov rax, 0x2000004 xor rdi, rdi syscall section .data helloMessage: db "Hello, World!", 10 .size equ $ - helloMessage I compile it as follows: gbiondo@tripleX ASM % nasm -f macho64 hello.asm and I link it like this: gbiondo@tripleX ASM % ld hello.o -o hello1 -lc -L /Library/Developer/CommandLineTools/SDKs/MacOSX.sdk/usr/lib When I run the executable, I get: gbiondo@tripleX ASM % ./hello1 Hello, World! zsh: segmentation fault ./hello1 Coming from the Linux ASM, I had these problems when I forgot the syscall to exit (in this case, the second block, starting with mov rax, 0x2000004) and ending with the syscall instruction, but here? What happens? Thanks.
Replies
0
Boosts
0
Views
618
Activity
Mar ’22
MacOS development courses
Hi Community! I would like to know if there is a real MacOS development course that covers AppKit without focusing on SwiftUI, or some mentors/tutors who can give me some lessons.
Replies
0
Boosts
0
Views
277
Activity
Oct ’24