7 posts tagged ‘Gatekeeper’
Xcode 16.2
mjtsai,
Apple (downloads): The Command Line Tools package now supports using the swift test command to build and run package tests written with Swift Testing.[…]Sometimes running parallel Tests on macOS run destinations never finishes.[…]macOS projects that use hardened runtime but no sandboxing may run into timeout errors when attempting to preview if the project is complex […]
SpamSieve 3.1
SpamSieve 3.1 improves the accuracy of my Mac e-mail spam filter, amongst many other enhancements. Some interesting issues were: NSHelpManager seems to be broken under Sequoia in that sometimes you have to click a help link multiple times for it to open the right page—until then it just opens the main help book page (FB15763353). […]
TCC and Gatekeeper Bypasses
Wojciech Reguła (September 2021, tweet): I was looking for code injection opportunities that may allow reaching TCC bypasses. My simple shell script discovered a potential victim - /System/Library/CoreServices/Applications/Directory Utility.app. It had (and has) the following private TCC entitlement[…] This entitlement allows the Directory Utility to modify the user’s records stored in the /var/db/dslocal/nodes directory. […] […]
Resolving Trusted Execution Problems
Quinn: If you’re developing software for macOS your goal is to avoid trusted execution entanglements. You want users to install and use your product without taking any special steps. If, for example, you ship an app that’s blocked by Gatekeeper, you’re likely to lose a lot of customers, and your users’ hard-won trust.[…]If you launch […]
A Picture Is Worth a Thousand Permissions Requests
Jason Snell (Reddit, Hacker News): Due to an extremely weird series of troubleshooting maneuvers, I recently found myself having to set my Mac up from scratch without migrating any of my preferences for the first time in longer than I’d like to admit.[…]More than anything else, though, the experience reminded me that Apple has a […]
Code Signing Woes
Dirk Lemstra (via Hacker News, tweet): Today [ImageMagick’s Windows] code signing certificate will expire. For many years LeaderSSL sponsored us with a code singing certificate but they are no longer able to do so. Since June of 2023 the CA/B Forum requires that OV code signing private keys be stored on a FIPS 140-2 Level […]
The Care and Feeding of Developer ID
Quinn: I regularly see folks run into problems with their Developer ID signing identities. Historically I pointed them to my posts on this thread, but I’ve decided to collect these ideas together in one place.[…]This post focuses on traditional signing identities, where you manage the private key. Xcode Cloud introduced cloud signing, where signing identities […]