Hello, I am creating a system extension and bundling it in an app. I have had success building the app and requesting activation of the extension from my application delegate (Swift). My question is that I need to somehow pass additional arguments from the app delegate that requests activation of the extension to the main function of my system extension. Specifically, I am trying to pass the username of the user that ran the application. Is there a way to pass additional arguments from the delegate to the extension? I cannot get the current user from within the system extension because the extension runs as root, always. So the fetching the current user will return root. Relevent code from my app delegate that requests activation: func applicationDidFinishLaunching(_ aNotification: Notification) {         let ID = "com...."     let req = OSSystemExtensionRequest 	.activationRequest(forExtensionWithIdentifier: ID, 										 queue: DispatchQueue.main).										 request.delegate = self     /*some how pass arguments to extension*/ OSSystemExtensionManager 	.shared.extensionManager.submitRequest(req) 			 } C/C++ code to start my System Extension: int main(int argc, const char* argv[]){     //start.....extension //Need to receive arguments here dispatch_main(); }

Hi, we have been granted our Endpoint Security, System Extension entitlement and are now building/signing with our newly created provisioning profile, which includes this entitlement along with a Developer ID cert. When trying to run the app containing the System Extension on a machine with SIP enabled, the System Extension does not load. The only output that we can see in console.app comes from sysextd log messages below: Here is what we see, we replaced our IDs with dummy IDs: sysextd: sysextd: staging extension with identifier com.system.extension.ID sysextd: MacOS error: 3 sysextd: Error checking with notarization daemon: 3 sysextd: bundle code signature is not valid - does not satisfy requirement: -67050 code failed to satisfy specified code requirement(s) sysextd: finished uninstalling extension com.system.extension.ID sysextd: waiting for external validation of extension with identifier com.system.extension.ID The OS we are trying to run this on is version 10.15.5. Is this because we haven't notorized the application? We are able to run everything without SIP enabled on our VM (Catalina 10.15.5) Please let me know anything else I can provide to help solve this. I don't see much else though int the logs.

We have a Mac App build with Pyinstaller. We can successfully sign and notarize the .app file itself with no issue. However, when building a PKG as an installer around this .app file, we get a notarization error that the signature of the binary is invalid. The binary that it complains about is the main exe of the .app file. This is confusing, because this was not happening when signing the .app file by itself. Our Release Team uses PackagesBuild to build the pkg. Any suggestions on what the problem could be? Here is the notarization log from the PKG: { 	"logFormatVersion": 1, 	"jobId": "c029134f-c0be-49ea-9e72-c297eb76f20c", 	"status": "Invalid", 	"statusSummary": "Archive contains critical validation errors", 	"statusCode": 4000, 	"archiveFilename": "pkg.zip", 	"uploadDate": "2020-10-26T22:26:51Z", 	"sha256": "b38799231a4cacf88fe835f167616a16aee2df1ecd7010dcf82165b97082e619", 	"ticketContents": null, 	"issues": [ 		{ 			"severity": "error", 			"code": null, 			"path": "pkg.zip/Release/installer.pkg/installer.pkg Contents/Payload/Applications/iManage/mainApp.app/Contents/MacOS/main_exe", 			"message": "The signature of the binary is invalid.", 			"docUrl": null, 			"architecture": "x86_64" 		} 	] }

I am currently monitoring ES_EVENT_TYPE_AUTH_CLONE events in my Endpoint Security client, but it seems to only respond to file, not folder, copies from finder. Is there any existing event to allow notification of a copy of a folder in finder? If not, are there any future plans to include such an event in the ES event list? Thank you.

Is there a programmatic way to show/enable Comments Tab from Swift? I currently have an app with a Finder Sync Extension displaying badges on Finder items. I am so open to any other programmatic suggestion such as Apple Script. Thank you.

Finder allows the user to manually change the default 'Open With' application for a file by going to 'Get Info'. Is there a way to programmatically do this, for example, with AppleScript, in order to change the default 'Open With' application of specific files? My use-case is changing default 'Open With' application for files that are in a certain directory. I prefer the user doesn't have to do this manually.

During our build process for our mac exe, there is a point where we run our newly built executable as a test. This executable tries to access the login keychain as part of our test. On the particular keychain item it is trying to access, we have selected to "Allow all applications to access this item". Even with this enabled, every new build and run of this exe is prompting that we "Allow Access" for this exe to access the keychain item. This requires manual intervention for each new build to continue running. Any ideas as to what we can do to stop the prompting? We can avoid accessing the keychain during this test process, but I'd rather not remove testing that we have been doing for a years. For background, this started a few weeks ago and was not a problem until recently. We also don't do any code signing of the exe in this process.

I am developing a File Provider Extension on Mac. I am confused about how the extendedAttributes property works. The property never seems to be populated with any extended attributes. I've tried setting some custom extended attributes on my documents in testing, but they are never populated in the itemTemplates that are produced in the extension. The dictionary that would hold the extended attributes always is empty. I began to think that it only supported Mac-created attributes such as com.apple.quarantine. I then tried importing some files that are 'quarantined' with this appropriate extended attribute but still have not seen this data appear in my extension either. Any clarity here with what I should be expecting or what I should try would be helpful.

I am developing a File Provider on Mac. I am marking some items within the domain as 'shared' via the NSFileProviderItemProtocol. However, the text 'Folder shared on iCloud by me' appears in Finder when these items are marked as shared. Is this correct? My provider has nothing to do with iCloud, which is, of course, the cloud developed by Apple. Is there a way to change this text or remove it? I've attached an image that shows the problem.

I am developing a FileProvider extension on Mac. I was wondering what the most reliable way to evict a document as soon as possible after createItem is called for the respective item. Our use-case for this is as follows: Users can 'bulk-import' items into a FileProvider folder, and we want our application to immediately evict the item as soon as possible once the item's content is uploaded to the server. This is to save space on the user's machine. So, what is the best way to accomplish immediate eviction after item creation? I've tried calling evictItem from within the createItem function itself, but that yields many errors and can cause slowness.

I am developing a Mac File Provider Extension. When testing installation from-scratch, The File Provider Name does appear on the side bar. However, the text '[App Name] encountered an unexpected error. Items may be out of date .....Try Again' appears at the top of the Finder window when opening the File Provider's Domain. Along with this text, there is a persistent 'Loading...' that is displayed in the middle of the Finder view. The File Provider seems to immediately get in a bad state. This does not happen at all during development. I am also noticing some logs in console that indicate some sort of issue. These 3 seem to be relevant. Any ideas or insight what could be going on? create-item(propagated:<root dbver:0 domver:<nil>>) why:itemChangedRemotely|diskImport sched:default.1717009685.233681#1717009069.3164978 error:<NSError: Cocoa 4101 "Couldn’t communicate with a helper application." Underlying={NSError: NSFileProviderInternalErrorDomain 7 "A connection to the extension “REMOVED ID” could not be made." Underlying={NSError: com.apple.extensionKit.errorDomain 2 "The operation couldn’t be completed. (com.apple.extensionKit.errorDomain error 2.)" UserInfo={(omitted)}}}}}>> → <requested:<p:root n:"i{31}e" dir child:0 m:rwxS ct:1717009068.969699 mt:1717009068.969699>> [duration 33ms44µs] Failed to create extensionProcess for extension 'REMOVED ID' error: Error Domain=com.apple.extensionKit.errorDomain Code=2 "(null)" UserInfo={NSUnderlyingError=0x7fa0ce9d28b0 {Error Domain=com.apple.extensionKit.errorDomain Code=2 "(null)" UserInfo={NSUnderlyingError=0x7fa0ce9d2ad0 {Error Domain=RBSRequestErrorDomain Code=5 "Launch failed." UserInfo={NSLocalizedFailureReason=Launch failed., NSUnderlyingError=0x7fa0ce9d33e0 {Error Domain=NSPOSIXErrorDomain Code=111 "Unknown error: 111" UserInfo=0x7fa0ce9d2900 (not displayed)}}}}}} Launch failed with error: Error Domain=com.apple.extensionKit.errorDomain Code=2 "(null)" UserInfo={NSUnderlyingError=0x7fa0ce9d2ad0 {Error Domain=RBSRequestErrorDomain Code=5 "Launch failed." UserInfo={NSLocalizedFailureReason=Launch failed., NSUnderlyingError=0x7fa0ce9d33e0 {Error Domain=NSPOSIXErrorDomain Code=111 "Unknown error: 111" UserInfo={NSLocalizedDescription=Launchd job spawn failed}}}}}

I am developing a file provider extension on Mac. I noticed when attempting to delete an enumerated folder with didDeleteItems, passing only the top-level folder's ID is not enough to delete the item. It seems we need to pass all items underneath as well to this function for the folder to be removed. Is there a way around this? The way our application is designed makes it challenging to do this and we would prefer being able to remove the folder by utilizing the item ID only. If not, how could we obtain the particular items underneath that should be passed in to the function?