Kevin Elliot said
By default, DEXTs are only allowed to connect to processes signed by the same team as the DEXT. No entitlement is required for this
I have not found this to be the case, at least not for communication between my CMIO Extension and my dext. The Extension must be sandboxed, and UserClient Access is required to escape the sandbox. UserClient Access is managed, so it isn't available to me yet for my dext's bundle ID. For development, I use allow-any-userclient-access in the dext, but still have to use com.apple.security.temporary-exception.iokit-user-client-class in the extension to escape its mandatory sandbox.
Topic:
App & System Services
SubTopic:
Core OS
Tags: