Re: task_for_pid and host_processor_set_priv failing on Yosemite 10.10.5
Re: task_for_pid and host_processor_set_priv failing on Yosemite 10.10.5
- Subject: Re: task_for_pid and host_processor_set_priv failing on Yosemite 10.10.5
- From: "Quinn \"The Eskimo!\"" <email@hidden>
- Date: Fri, 03 Jun 2016 13:38:34 +0100
On 3 Jun 2016, at 13:29, Gordo Cath <email@hidden> wrote:
> I would have though the nvram kext-dev-mode=1 would have let me past that? or does that flag not work for applications?
`kext-dev-mode` is only relevant to KEXTs.
> So in one case i started the first process, a true 64 bit process from my userid. and the second process is my own custom 64 bit application. However the first process is third party, as I do not have access to their source.
What’s the high-level goal here? What is your process trying to do to this other process?
* * *
It seems to me that you’re approaching this from a traditional UNIX perspective, where all processes owned by a particular user are essentially equal. This is not true on Darwin because all of our platforms require us to protect app A from app B even though A and B are run by the same user. This is central to all iOS-based platforms, but it also applies to OS X when you consider sandboxing.
In some cases you can bypass this restriction by running as root but even that’s not guaranteed. Consider this:
$ sw_vers
ProductName: Mac OS X
ProductVersion: 10.11.5
BuildVersion: 15F34
$ sudo lldb
Password: ********
(lldb) process attach -n Finder
error: attach failed: cannot attach to process due to System Integrity Protection
System Integrity Protection on 10.11 and later prevents `task_for_pid` from targeting certain processes even if it’s called as root.
Share and Enjoy
--
Quinn "The Eskimo!" <http://www.apple.com/developer/>
Apple Developer Relations, Developer Technical Support, Core OS/Hardware
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden