October 2019 - Darwin-dev - lists.apple.com

Re: Command line LLDB under root permission - Catalina + Xcode 11
by Prokash Sinha via Darwin-dev 17 Oct '19

17 Oct '19

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Thanks much for the information Max ! Really appreciate it ! Personally, IMHO there should be a way to debug this by disabling some flag(s) from lldb. Otherwise we will have to depend on trace messages - which is passive debugging :-) -Prokash > On Oct 17, 2019, at 1:32 PM, comex <comexk(a)gmail.com> wrote: > > On Thu, Oct 17, 2019 at 1:22 PM Prokash Sinha via Darwin-dev > <darwin-dev(a)lists.apple.com> wrote: >> Once some breakpoint is hit, within 20 to 30 sec. it gets sorta kill -9 >> kinda signal ( exit code is 9 ). > > The EndpointSecurity driver currently kills client processes if they > take too long to respond to a synchronous message > (ES_EVENT_TYPE_AUTH_*). There is no way to turn this off. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.ap… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Command line LLDB under root permission - Catalina + Xcode 11
by comex via Darwin-dev 17 Oct '19

17 Oct '19

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=9lKw2N/HHyt6tN8qOvaXrpEvIEKArmHxTctzBxBcjuE=; b=LkDbV/ZnI3nWNtt3jR/Ob19Uka6SH25JtO4SG05sb5YcaguHmb0VhbTYrjXuY3U+wI U5B2Kh3YBAomzAG5s20Wr5Wwu12h7BZT7UF08RhKqMEL6dVS1TPuVAJ7WOtPHZalYH0c GZ7Jtlovk/KWF1mKiGwrEV5zl+vz+RgNRH/XGajtfPxU6yzqIbVQiqC1Aag8O0Ph+E81 7h7d1XlKLZe6Io9Q/XDS/ZFrmqRZb5KrWLVFdpCCCyYgBQdNA+t3bynx75j45oIqit/n paL9cPQsDtWGg9TYo2ulm4GABxLJQBCxcrPRs9d0L2fMTBBnaAfKj7NpxYCJzRw7hUaD tv3A== On Thu, Oct 17, 2019 at 1:22 PM Prokash Sinha via Darwin-dev <darwin-dev(a)lists.apple.com> wrote: > Once some breakpoint is hit, within 20 to 30 sec. it gets sorta kill -9 kinda > signal ( exit code is 9 ). The EndpointSecurity driver currently kills client processes if they take too long to respond to a synchronous message (ES_EVENT_TYPE_AUTH_*). There is no way to turn this off. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.ap… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Command line LLDB under root permission - Catalina + Xcode 11
by Prokash Sinha via Darwin-dev 17 Oct '19

17 Oct '19

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com This is not any App distributed by Apple. It’s a command line app (with right entitlement ) to execute Endpoint security extension related APIs. These are post Catalina features that coming down the pipe… The App requires root permission to run ( but I can try a normal command line App to see if there is any diff …) $sudo su password:: <…..> # lldb <path of the app>/commandlineapp (lldb) set some bp (lldb) run Once some breakpoint is hit, within 20 to 30 sec. it gets sorta kill -9 kinda signal ( exit code is 9 ). Usually I see this kind of behavior when kernel debugging over KDP, but on this occasion its pure application debugging on the same machine. Thanks Max! Prokash > On Oct 17, 2019, at 6:09 AM, Max Coplan <ssjvegerot(a)icloud.com> wrote: > > Prokash, > Which app are you trying to run, and “how” are you trying to run it as root? > > Thanks, > Max > > Sent from my iPad > >> On Oct 16, 2019, at 3:00 PM, darwin-dev-request(a)lists.apple.com wrote: >> >> Send Darwin-dev mailing list submissions to >> darwin-dev(a)lists.apple.com >> >> To subscribe or unsubscribe via the World Wide Web, visit >> https://lists.apple.com/mailman/listinfo/darwin-dev >> or, via email, send a message with subject or body 'help' to >> darwin-dev-request(a)lists.apple.com >> >> You can reach the person managing the list at >> darwin-dev-owner(a)lists.apple.com >> >> When replying, please edit your Subject line so it is more specific >> than "Re: Contents of Darwin-dev digest..." >> >> >> Today's Topics: >> >> 1. Command line LLDB under root permission - Catalina + Xcode 11 >> (Prokash Sinha) >> >> >> ---------------------------------------------------------------------- >> >> Message: 1 >> Date: Wed, 16 Oct 2019 10:20:38 -0700 >> From: Prokash Sinha <prokash(a)garlic.com> >> To: darwin-dev(a)lists.apple.com >> Subject: Command line LLDB under root permission - Catalina + Xcode 11 >> Message-ID: <AFCF7700-DAB5-4799-8642-A64436817232(a)garlic.com> >> Content-Type: text/plain; charset=utf-8 >> >> Hello! , >> >> Can someone explain, why I?m getting a Killed 9, when I launch an app under >> root account. Is there a way to disable this timeout or whatever causing >> KILL signal ? >> >> This is just to test some of the Endpoint Security framework in post >> Catalina, and it requires root permission. >> >> Thanks, >> Prokash >> >> ------------------------------ >> >> Subject: Digest Footer >> >> _______________________________________________ >> Darwin-dev mailing list >> Darwin-dev(a)lists.apple.com >> https://lists.apple.com/mailman/listinfo/darwin-dev >> >> >> ------------------------------ >> >> End of Darwin-dev Digest, Vol 16, Issue 18 >> ****************************************** > _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.ap… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Command line LLDB under root permission - Catalina + Xcode 11
by Max Coplan via Darwin-dev 17 Oct '19

17 Oct '19

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=icloud.com; s=1a1hai; t=1571317801; bh=iGCvnibX70CEK+8AWyYpy5IVmkiICu3Z/C8s34RpzbA=; h=Content-Type:From:Date:Message-Id:Subject:To; b=Z/Q6n82lE9t06bQEjjG0LESNJv7YGrIpdlHPFFDYgIx7lkI7DbiJw4oHBntT0+T3x Csj5cHdYR/WvFZSiwW2/8djRepZYKkkyD5Tn7drzU6YtxXGZEVsMQhshx3djpXEmFt Tiwgw1S4/vO2yOEWMNhM0vAuJF11NbpLNHY9dnUbqKX4JX4VvfJJ7LZFypIVjX+BJ+ vrHVAzQQ9wRdgnmoG5mvbypQiztTFrHTphm0DmAf1bSY5oMJHxX7j2BLzUJBkKbvLC IWaCvs7YuR/t8uspdRQNT/dl5HKAQh89t+le8wEUhzIUszuCxBaflMbAmdK1Rm6e5K KXNHkt0g7wJGw== Prokash, Which app are you trying to run, and “how” are you trying to run it as root? Thanks, Max Sent from my iPad > On Oct 16, 2019, at 3:00 PM, darwin-dev-request(a)lists.apple.com wrote: > > Send Darwin-dev mailing list submissions to > darwin-dev(a)lists.apple.com > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.apple.com/mailman/listinfo/darwin-dev > or, via email, send a message with subject or body 'help' to > darwin-dev-request(a)lists.apple.com > > You can reach the person managing the list at > darwin-dev-owner(a)lists.apple.com > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Darwin-dev digest..." > > > Today's Topics: > > 1. Command line LLDB under root permission - Catalina + Xcode 11 > (Prokash Sinha) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 16 Oct 2019 10:20:38 -0700 > From: Prokash Sinha <prokash(a)garlic.com> > To: darwin-dev(a)lists.apple.com > Subject: Command line LLDB under root permission - Catalina + Xcode 11 > Message-ID: <AFCF7700-DAB5-4799-8642-A64436817232(a)garlic.com> > Content-Type: text/plain; charset=utf-8 > > Hello! , > > Can someone explain, why I?m getting a Killed 9, when I launch an app under > root account. Is there a way to disable this timeout or whatever causing KILL > signal ? > > This is just to test some of the Endpoint Security framework in post > Catalina, and it requires root permission. > > Thanks, > Prokash > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > Darwin-dev mailing list > Darwin-dev(a)lists.apple.com > https://lists.apple.com/mailman/listinfo/darwin-dev > > > ------------------------------ > > End of Darwin-dev Digest, Vol 16, Issue 18 > ****************************************** _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.ap… This email sent to site_archiver(a)lists.apple.com

1 0

Command line LLDB under root permission - Catalina + Xcode 11
by Prokash Sinha via Darwin-dev 16 Oct '19

16 Oct '19

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Hello! , Can someone explain, why I’m getting a Killed 9, when I launch an app under root account. Is there a way to disable this timeout or whatever causing KILL signal ? This is just to test some of the Endpoint Security framework in post Catalina, and it requires root permission. Thanks, Prokash _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.ap… This email sent to site_archiver(a)lists.apple.com

1 0