Posts

Post marked as solved
3 Replies
1.6k Views
Hi! Since current macOS 11.3 beta 3, a bug appeared that was also present on some previous betas :( When loading a kernel extension, if it's unsigned but explicity allowed on AppleKextExcludeList (the list where Apple stores old safe kernel extensions, like vmware ones, some filesystems, etc) fails to load. This is a problem for all of us that want to keep running some legit software with no equivalent under SystemExtensions frameworks. This is just an example of osxfuse present on allowed list by Apple, but happens with ALL kernel extensions on the allowed list (like turbo boost switcher one, vmware, etc). All works just fine with current 11.2 Big Sur release.., please, fix that in order to add again the check against that list present on /Library/Apple/System/Library/Extensions/AppleKextExcludeList.kext/Contents/Info.plist -- sudo kextutil -v ../Desktop/osxfusefs.kext Defaulting to kernel file '/System/Library/Kernels/kernel' Executing: /usr/bin/kmutil load --bundle-path /Users/Ruben/Desktop/osxfusefs.kext Error Domain=KMErrorDomain Code=29 "Authenticating extension failed: Kext com.github.osxfuse.filesystems.osxfusefs v2.6.1 in executable kext bundle com.github.osxfuse.filesystems.osxfusefs at /private/var/db/KernelExtensionManagement/Staging/com.github.osxfuse.filesystems.osxfusefs.HnEP4u/osxfusefs.kext: Authenticating extension failed: Bad code signature" UserInfo={NSLocalizedDescription=Authenticating extension failed: Kext com.github.osxfuse.filesystems.osxfusefs v2.6.1 in executable kext bundle com.github.osxfuse.filesystems.osxfusefs at /private/var/db/KernelExtensionManagement/Staging/com.github.osxfuse.filesystems.osxfusefs.HnEP4u/osxfusefs.kext: Authenticating extension failed: Bad code signature}
Posted
by rubgape.
Last updated
.
Post not yet marked as solved
1 Replies
985 Views
Hi there! I've already posted this through feedback assistant (FB8767409) but posting here also to see if there is anyone experiencing the same issue. It seems that now on big sur, when you try to load a kext, it builds a cache and checks all of kernel extensions available.., the problem is that if there is at least one that can't be loaded, then no one is loaded even when it's fine. Here it's an example. When tried any Big Sur compatible extension with Virtual Box also installed (not compatible so far), the log shown: Error: Error Domain=KMErrorDomain Code=1 "Unable to resolve dependencies: 'org.virtualbox.kext.VBoxUSB' names a dependency on 'org.virtualbox.kext.VBoxDrv', which was not found." UserInfo={NSLocalizedDescription=Unable to resolve dependencies: 'org.virtualbox.kext.VBoxUSB' names a dependency on 'org.virtualbox.kext.VBoxDrv', which was not found.} Even when this has nothing to do when the extension I want to load! :( Reproduced this with several kexts... All other kexts were loaded just fine only after removing VirtualBox kext.., weird :(, this shouldn't be happening and kmutil/kextutil should only check the kext requested by the user to be loaded. Thanks in advance for the feedback!
Posted
by rubgape.
Last updated
.
Post not yet marked as solved
2 Replies
503 Views
Hi there! I've searching around, but wasn't able to find any documented way of doing the following.... In summary, it's possible to have a similar api to NSUserDefaults, but to store app common defaults shared by all users? I know I can accomplish that by using custom plist, core data and so on, but I think it'd great to have a similar API like NSUserDefaults but to store common app defaults shared by all users..., Thanks!!
Posted
by rubgape.
Last updated
.
Post not yet marked as solved
6 Replies
626 Views
Hi!I've an app that has been notarised without issues until now (last time just some weeks ago). Now is being rejected because it includes an unsigned kext... but the kext is allowed to run and whitelisted at AppleKextExcludeList for years.I guess the notarisation process has been recently changed and is not checking that whitelist, but it should, since it's not taking into account this old kext that run without issues and has been doing so for years.Already opened a FB: FB7642485Is there any other way to continue distributing the app and notarizing under this new policy? Do I need to sign the app with the developer certificate instead of Dev ID? Any ideas?Thanks!
Posted
by rubgape.
Last updated
.
Post not yet marked as solved
11 Replies
1.4k Views
Hi!Well, It seems there is a bug on macOS Catalina when using several monitors in vertical disposition, main one below. If you click on the status bar over a NSStatusItem under this configuration, and the app uses popUpStatusItemMenu to pop the menu, then it doesn't work when clicked on the main monitor. No error log either.., just nothing appears.I know it's a strange behaviour, but could reproduce it with several apps, including testing ones. I also know this method has been deprecated on 10.14, but that doesn't mean it shouldn't work and in fact, with Mojave, the method works perfectly fine under same circumstances.When using other alignments (left to right and so on) this doesn't happen.Opened a case: FB7456388Thanks for reading! Hope this gets fixed on current Catalina beta.
Posted
by rubgape.
Last updated
.
Post marked as solved
1 Replies
1.7k Views
Hi!Just that simple question: Where to address new features request for System Extensions? I wasn't able to find any official statement/channel from Apple after WWDC 2019 😟Thanks in advance!
Posted
by rubgape.
Last updated
.
Post not yet marked as solved
2 Replies
1.8k Views
.. I'm afraid that's true 😟, when I say all, I mean ALL of them.At first opened another thread thinking the issue was present only for a bunch of kexts, but after days of randomly picking kexts and trying (some of them very popular), none worked and always displayed same error.Including here a couple of additional examples (tried more, like kext to disable turbo boost, a wireless external card driver, hp printer driver, etc).- osxfusefs (com.github.osxfuse.filesystems.osxfusefs)- ACPIBackling (com.darwin.driver.ACPIBacklight)Always same error. After aproving on system preferences and rebooting, running sudo kextutil -v /path/to/kext displays "...allowing to load" to inmediately show "... unable to calculate CDHash, disallowing load".In the meantime, vmware keeps failing, also virtual box (both have unsigned extensions on that list), etc.Here is the output of the couple of examples..., already reported through feedback assistant....kext file:///Library/StagedExtensions/osxfusefs.kext/ is in hash exception list, allowing to load Skipping migration.plist import (allowBundleIDs:41, cdhashArrayRef:41) { URL = "file:///Library/StagedExtensions/osxfusefs.kext/", ID = "com.github.osxfuse.filesystems.osxfusefs" } is missing or has an invalid CDHash. Disallowing load. Kext rejected due to system policy: { URL = "file:///Library/StagedExtensions/osxfusefs.kext/", ID = "com.github.osxfuse.filesystems.osxfusefs" }And the other onekext file:///Library/StagedExtensions/ACPIBacklight.kext/ is in hash exception list, allowing to load Skipping migration.plist import (allowBundleIDs:41, cdhashArrayRef:41) { URL = "file:///Library/StagedExtensions/ACPIBacklight.kext/", ID = "com.darwin.driver.ACPIBacklight" } is missing or has an invalid CDash. Disallowing load.Reported as FB6516891 and FB6498867 including kexts to try.There are more than 9.000 kexts on that list..., can't believe on beta 3 this hasn't been fixed yet.., embarrasing. No need to say all of those extensions load without issues on Mojave and previous versions.Guys! Let's keep reporting it so the hear us! 😟, no feedback yet
Posted
by rubgape.
Last updated
.
Post marked as solved
5 Replies
5.2k Views
Just tried beta 2 and the bug present on beta 1 is still present.Now kextload works (great!), but is displaying same error when trying to load an approved unsigned kext (any included on kextsOSKextSigExceptionHashList).When doing kextutil -v "path to kext" (one unsigned and present on kextsOSKextSigExceptionHashList included with AppleKextExcludeList) shows:"...is in hash exception list, allowing to load..."And inmediately after this, it shows "...is missing or has an invalid CDHash. Disallowing load." which doesn't makes sense since cdhash is only available if the kext is signed and we're processing unsigned and allowed kexts here! 🙂Hope Apple fixes this soon, since there are some utilities not working yet with macOS Catalina beta 2 and would like to use them without needing to disable SIP.
Posted
by rubgape.
Last updated
.
Post not yet marked as solved
9 Replies
4.4k Views
Hi!After trying some apps with the new beta... found some didn't work..., and just discovered it was to this first beta of macOS 10.15 not including AppleKextExcludeList :O :OThere are thousands (literally) of trusted entries specifically.., is this intended or maybe is just a bug and future versions of versions will include it like on all previous macOS releases? a LOT of software relies on this in order to run properly, including some famous apps like vmware, etc.Thanks in advance and best regards.
Posted
by rubgape.
Last updated
.