Post

Replies

Boosts

Views

Activity

Reply to questions about EndpointSecurity & System Extension
Hi Quinn,The man page that this leads you to says for NSEndpointSecurityMachServiceName, "If set, this string will be the name of the MachService which can be used for XPC between the ES extension and its app." Since this is no longer a LaunchDaemon app with a plist that has mach services, will this work the same and let any application connect to the ES extension via XPC? We have multiple apps that need to connect to our driver and if it's only the enclosing app that this allows, well, that'll not be good.This is on my plate to work on again next week, and it'd be nice to know before I head down a dead end.Thanks
Feb ’20
Reply to questions about EndpointSecurity & System Extension
Hi Quinn and others,I tested this and yes, an external app can talk to my ES extension using XPC as if the extension was a launchd service.Looking at the man page more carefully (man EndpointSecurity), I see that at the bottom, the date is "27 November, 2018" (is it really that old?) and probably hasn't been updated for the change the release note is referencing. But that is speculation on my part.
Feb ’20
Reply to Zombie System Extensions
As mentioned above, use systemextensionsctl to uninstall it. See man systemextensionsctl for all the infoFirst, list it to see that it's runningsystemextensionsctl listThen uninstall by copying the team ID and bundle ID and running this command, with those values replacing the placeholders below.systemextensionsctl uninstall TEAMID BUNDLEID
Feb ’20
Reply to Endpoint Security deadline and sleeping
Hi Quinn,Yes, Xcode 11.4 beta 3 (11N132i), running on 10.15.4 Beta (19E258a)So, it's not a clock time, but a run time? I.e., it starts ticking on boot and pauses when it's asleep. I use the deadline and mach_time values to calculate a timeout value that I use to make sure we answer in time. Already had a timeout check, just updated it to use the MIN of this value (minus 1 second for a cushion) and our normal timeout value. But still occasionally see the above error message in the log after wakeup or resuming the VM after suspending it. Just made me wonder and post this question.Thanks
Mar ’20