mdobro’s Profile | Apple Developer Forums

Replied In Legacy LaunchAgents installed via PKG

I would also like to know if there is a solution. We have the same issue. Our product is rather complex with an application, a daemon, an agent plus some other components (like an authorization plugin) so it is just simpler to install via a package (built with productbuild --distribution). We have added the AssociatedBundleIdentifiers key to the launchd plist for both the daemon and agent but they still show under our developer name and not the application in System Settings after installing. It is only after running sfltool resetbtm and restarting that the daemon and agent show with the application name. I have tried using /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/Support/lsregister to register the application in its postinstall script (which executes before the daemon or agent gets installed) but that didn't help.

Replied In Kext signing - commandline tools

Check if there is a copy of your kext in /Library/StagedExtensions/Library/Extensions and what permissions it has. Last time I work with kernel extensions the system would load a copy of the kext into that folder but would not modify the permission on that copy if you changed the permissions on the kext in /Library/Extensions. Incorrect permissions on that copy would result in permission errors loading the kext. If I recall correctly changing the permission on the copy in StagedExtensions was a pain since that folder was protected by SIP (You need to boot into recovery mode and delete the copy in StagedExentions from there).

Replied In Trying to test the process of getting a NE to work as a Developer ID app with SIP on

In reply to your followup question, if you use the command line tool xcodebuild (see man xcodebuild), to build your Xcode projects, you can override build settings on the command line. We use this for our builds. In the project we set the CODE_SIGN_IDENTITY to "Mac Developer" for both Release and Debug builds so the Developer ID certificate is not needed on normal development computers. When we actually want to build the final product we use xcodebuild and set CODE_SIGN_IDENTITY="Developer ID Application" on the command line. There may be a few other build settings that need to be overriden at the command line. If I recall correctly we needed to explicitly set CODE_SIGN_INJECT_BASE_ENTITLEMENTS=NO and OTHER_CODE_SIGN_FLAGS="--timestamp" to get notarization to work.

Replied In Determine if Active Directory user is admin or not

Does the ODRecord method isMemberRecord:error:, for determining group membership, handle nested groups? The documentation for the method is silent on that point. I'm wondering if I should change our code to use mbr_check_membership instead of isMemberRecord:error:.

Replied In determine if an account is a mobile account or Active directory account or local user account (non-mobile)

When we try to distinguish mobile users from other users we look for the presense of either kODAttributeTypeOriginalNFSHomeDirectory or kODAttributeTypeOriginalNodeName. The help for both those keys indicate they are used for "local account caching" and they work fairly reliably for our use. You need to test for both since some users may only have one and not the other.

Replied In About kext notarizing

Have you looked at xpc_events (see man xpc_events)? It will allow you to launch a daemon on-demand when your kext is loaded. This might yield a cleaner solution than what you've outlined above.

Replied In Is there an API to get APFS volume's "role"?

The role is listed as a property of the IOMedia object for the volume. If you can get the DADiskRef for the volume in question you can use the following code to read the property for the role:CFArrayRef DiskCopyRole(DADiskRef diskRef) { CFArrayRef roles = NULL; io_service_t service = DADiskCopyIOMedia(diskRef); if (IO_OBJECT_NULL != service) { roles = IORegistryEntryCreateCFProperty(service, CFSTR("Role"), kCFAllocatorDefault, kNilOptions); IOObjectRelease(service); } return roles; }

Replied In Changing icons dynamically for signed and notarized apps

Hello Quinn,Like the original poster we are just setting kHasCustomIcon. In our case we are adding a custom icon to a disk image volume that we create in code. We actually filed a bug (FB5771677) in 2016 against the non-functional NSURLCustomIconKey.Thanks

Replied In Changing icons dynamically for signed and notarized apps

Hello Quinn,We are also looking for a non-depricated replacement for FSSetCatalogInfo. What are your thoughts on using getattrlist and setattrlist? One can access the Finder Info using the common attribute ATTR_CMN_FNDRINFO. It appeared to work when I tested this a while back but I could not find any information on whether this is could (should?) be used as a replacement for FSSetCatalogInfo.

User Profile

mdobro

Posts

Posts