Error not entitled while SIP is disabled

Question

Created Jun ’19

Replies 2

Boosts 0

Views 1.9k

Participants 3

Hello,

I'm trying to write a sample code for the EndpointSecurity framework.

I understand that my binary needs to be entitle for such thing, but I have disabled SIP and still I'm getting an error while calling

es_new_client

error code is

ES_NEW_CLIENT_RESULT_ERR_NOT_ENTITLED.

are there any other settings required changes?

Thanks

Answered by scknight in 365670022

If you want to play around with the endpoint security APIs you'll need to do the following three things:

1. Disable SIP

2. Give your app the com.apple.developer.endpoint-security.client entitlement

3. Run the application as root

Boost

Answer 1

Jun ’19

Accepted Answer

If you want to play around with the endpoint security APIs you'll need to do the following three things:

1. Disable SIP

2. Give your app the com.apple.developer.endpoint-security.client entitlement

3. Run the application as root

0

Answer 2

Jan ’20

Hi scknight,

I've done all of these things and I'm still getting a code signiture error : https://forums.developer.apple.com/message/403291#403291

BR

0