Post

Replies

Boosts

Views

Activity

Reply to [NEFilterDataProvider] Filter flows for some application
I presume we’re talking macOS here. You're totally right. I forgot to this crucial precision, my bad. Don’t use the bundle ID to identify a program in a security context. You can’t trust it [1]. There’s nothing stopping someone from creating an app with the bundle ID of com.apple.finder, for example. Thank you for the advice. For now, my application is simply filtering some web content from browsers. I thought that identifying browsers from a bundleId was largely sufficient here. I encourage you to file an enhancement request describing your requirements. Please post your bug number, just for the record. Here is the suggestion number FB13511360. It’s common for macOS NE filter providers to be paired with an Endpoint Security client. Is that the case for your product? If so, you can use the ES client to track process responsibility via its responsible_audit_token property. It is. I quickly obtained the 'Endpoint Security client' capability for development. However, acquiring it for production seems to be more challenging, and I'm uncertain whether I can rely on obtaining it before my app is ready. Thank you for your answers.
Jan ’24