Post

Replies

Boosts

Views

Activity

Reply to Having trouble getting the endpoint-security entitlement working
I just did all that, and got the same results I have been getting. I have tried creating a brand new one, and deleting the old one(s) and recreating, I have tried having App Groups + System Extension, I have tried with only Endpoint Security. I have looked at the downloaded file using vi, and with 'security cms'. I am, at this point, going to make a screen recording, and file a TSI. I really hope it'll be obvious what I'm doing wrong 😩.
Topic: Privacy & Security SubTopic: General Tags:
Jan ’22
Reply to Having trouble getting the endpoint-security entitlement working
Ok, sorry for the confusing use of pronouns. I should have paid them more. I added the com.apple.developer.endpoint-security.client entitlement to the entitlements file for the app. I created a profile, using the portal, that had Endpoint Security as an additional entitlement; it was signed with our Developer ID certificate. I downloaded the newly-created profile, and examined it using emacs: it did not have the com.apple.developer.endpoint-security.client entitlement in it. For the executable (which kept getting killed, of course), I saw that there was a complaint about signature and profile mismatch in system.log, so I used codesign and cms to look at the entitlements and profile for the executable, and the com.apple.developer.endpoint-security.client entitlement was not in the cms output.
Topic: Privacy & Security SubTopic: General Tags:
Jan ’22
Reply to CMake, Xcode, and Swift and Objective-C
I'm using # What I *want* to do is have this copied somewhere. # But I don't know how to tell XCode to do that. set_target_properties(LibraryControl PROPERTIES     XCODE_ATTRIBUTE_SWIFT_OBJC_INTERFACE_HEADER_NAME "LibraryControl-Swift.h"     XCODE_ATTRIBUTE_DERIVED_FILE_DIR "${PROJECT_BINARY_DIR}"     XCODE_ATTRIBUTE_SWIFT_OBJC_BRIDGING_HEADER "${PROJECT_SOURCE_DIR}/common/mac/LibraryControl-Bridging-Header.h" ) and then set target_include_directories appropriately in the other CMakeLists.txt files.
Jan ’22
Reply to kMDItemDisplayName doesn't do case-insensitive queries?
So put the 'c' after the target string? Wow. Let me try it but thanks! Wow thanks!
Topic: App & System Services SubTopic: General Tags:
Replies
Boosts
Views
Activity
Mar ’22
Reply to With a proxy app provider, what happens with an exec?
I don’t have any intent on doing that, I am simply curious what happens — we’ve been asked to provide the process name for a connection, and in playing it out in my head, I realized the documentation was completely silent on this.
Replies
Boosts
Views
Activity
Feb ’22
Reply to Getting started with MDM as a software provider
Nobody has any thought or information about this? No pointers to resources?
Replies
Boosts
Views
Activity
Feb ’22
Reply to AppleEvent keyDirectObject does not work the way I expect
Nobody has any thoughts about this? 😩
Topic: UI Frameworks SubTopic: AppKit Tags:
Replies
Boosts
Views
Activity
Feb ’22
Reply to Is there an easy way to compare signing identifiers?
Being lazy, I was hoping for pre-canned code. 😄 I've got notes to digest about it all, at least.
Topic: Code Signing SubTopic: General Tags:
Replies
Boosts
Views
Activity
Jan ’22
Reply to How to do a cascading series of events to open an application with specific information?
Yes, it turns out I can, by using event.attributeDescriptor(forKeyword: keyword) on the NSAppleEventDescriptor, which gives me an audit_token_t, from which I can at least sometimes get security (eg SecCode). Answer from @eskimo via TSI, which was SO WORTH IT.
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
Jan ’22
Reply to Having trouble getting the endpoint-security entitlement working
In my defense, I missed the word "only" in "approved for development only" -- the one I need it for is a "Developer ID" and that shares many of the same letters.
Topic: Privacy & Security SubTopic: General Tags:
Replies
Boosts
Views
Activity
Jan ’22
Reply to Having trouble getting the endpoint-security entitlement working
Quinn discovered it! I only got permission for it for development, while I was creating the profile with distribution. Now to figure out how to get it for distribution... (Since Quinn and I are 8 hours apart, temporally, this took back&forth a couple of days communicating via TSI.)
Topic: Privacy & Security SubTopic: General Tags:
Replies
Boosts
Views
Activity
Jan ’22
Reply to Having trouble getting the endpoint-security entitlement working
I just did all that, and got the same results I have been getting. I have tried creating a brand new one, and deleting the old one(s) and recreating, I have tried having App Groups + System Extension, I have tried with only Endpoint Security. I have looked at the downloaded file using vi, and with 'security cms'. I am, at this point, going to make a screen recording, and file a TSI. I really hope it'll be obvious what I'm doing wrong 😩.
Topic: Privacy & Security SubTopic: General Tags:
Replies
Boosts
Views
Activity
Jan ’22
Reply to Having trouble getting the endpoint-security entitlement working
I thought ES was only available on macOS. Here it is:
Topic: Privacy & Security SubTopic: General Tags:
Replies
Boosts
Views
Activity
Jan ’22
Reply to Having trouble getting the endpoint-security entitlement working
It's a launchd-driven app Two screenshots attached here, one showing an edited version of the downloaded provisioning profile, and the other showing the app id from the developer portal
Topic: Privacy & Security SubTopic: General Tags:
Replies
Boosts
Views
Activity
Jan ’22
Reply to Having trouble getting the endpoint-security entitlement working
Ok, sorry for the confusing use of pronouns. I should have paid them more. I added the com.apple.developer.endpoint-security.client entitlement to the entitlements file for the app. I created a profile, using the portal, that had Endpoint Security as an additional entitlement; it was signed with our Developer ID certificate. I downloaded the newly-created profile, and examined it using emacs: it did not have the com.apple.developer.endpoint-security.client entitlement in it. For the executable (which kept getting killed, of course), I saw that there was a complaint about signature and profile mismatch in system.log, so I used codesign and cms to look at the entitlements and profile for the executable, and the com.apple.developer.endpoint-security.client entitlement was not in the cms output.
Topic: Privacy & Security SubTopic: General Tags:
Replies
Boosts
Views
Activity
Jan ’22
Reply to stuck on verifying screen/ Package Dependencies
I am still getting this problem. 13C100, downloaded it fresh today. And yet it works on another machine. sigh.
Replies
Boosts
Views
Activity
Jan ’22
Reply to CMake, Xcode, and Swift and Objective-C
I'm using # What I *want* to do is have this copied somewhere. # But I don't know how to tell XCode to do that. set_target_properties(LibraryControl PROPERTIES     XCODE_ATTRIBUTE_SWIFT_OBJC_INTERFACE_HEADER_NAME "LibraryControl-Swift.h"     XCODE_ATTRIBUTE_DERIVED_FILE_DIR "${PROJECT_BINARY_DIR}"     XCODE_ATTRIBUTE_SWIFT_OBJC_BRIDGING_HEADER "${PROJECT_SOURCE_DIR}/common/mac/LibraryControl-Bridging-Header.h" ) and then set target_include_directories appropriately in the other CMakeLists.txt files.
Replies
Boosts
Views
Activity
Jan ’22
Reply to What does "not supported" mean in a deprecation warning?
FSRef is also deprecated (and comes with the warning that it's not on friendly terms with APFS), so the question is: where are you getting your FSRef?
Replies
Boosts
Views
Activity
Dec ’21