Mac app(ProcessMonitor) crashing with EXC_CRASH (Code Signature Invalid)

Question

Created Jul ’20

Replies 9

Boosts 0

Views 1.3k

Participants 3

When I build and run the source code of "ProcessMonitor", I get the following error.
Certificate and provisioning profiles are created for this app.
The results will not change even if you download and execute the notarized app.
Please tell me how to run the app.

ProcessMonitor：
objective-see - products utilities - ProcessMonitor

Exception Type:     EXCCRASH (Code Signature Invalid)
Exception Codes:   0x0000000000000000, 0x0000000000000000
Exception Note:      EXCCORPSE_NOTIFY
Termination Reason: Namespace CODESIGNING, Code 0x1
XCode:11.5(11E608c)
MacOS:10.15.5(19F101)

Boost

Answer 1

DTS Engineer OP

Apple

Jul ’20

Crashes like this are usually the result of one of two problems:

You’ve signed the app with a code signing identity that’s incompatible with the environment in which you’re trying to run it (for example, you’re trying to run something signed with a distribution identity).
You’re using invalid entitlements (either completely invalid, or entitlements that aren’t allowlisted by your provisioning profile).

To dig into this, run the following commands:

Code Block  % codesign -v -vvv /path/to/your.app
% codesign -d -vvv --entitlements :- /path/to/your.app

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

1

Answer 2

TSawano OP

Jul ’20

As a result of executing the command, the following results were obtained.
My MacOS version is 10.15.5, but I'm worried that "Runtime Varsion" is 10.15.4.
Is there any other place where you might have a problem?

$ codesign -v -vvv /my.app/

$ codesign -d -vvv --entitlements :- /my.app/

0

Answer 3

DTS Engineer OP

Apple

Jul ’20

Your app is using a number of entitlements that must be allowedlisted by a provisioning profile:

com.apple.application-identifier and com.apple.developer.team-identifier are constrained entitlements. They must be allowlisted by a profile but anyone can create such a profile.
com.apple.developer.endpoint-security.client is a special entitlement. You must be granted access to this by Apple.

Have you applied for and been granted access to com.apple.developer.endpoint-security.client? Have you created your profile based on that? Is it embedded correctly? Does that profile allowlist all of these entitlements?

You can dump the profile as follows:

Code Block  % security cms -D -i /path/to/your.app/Contents/embedded.provisionprofile

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

0

Answer 4

TSawano OP

Jul ’20

I submitted a request for "com.apple.developer.endpoint-security.client" to Apple a month ago, but I have no answer.
Will it take time to apply?

1

Answer 5

DTS Engineer OP

Apple

Jul ’20

Will it take time to apply?

It can take a while. Keep in mind that WWDC happened during that month, and that punches a huge hole in everyone’s schedule. Give it a couple more weeks and then post back here if your request has gone unanswered.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

0

Answer 6

SamAppLet OP

Jul ’20

@eskimo :

How to apply for and been granted access to com.apple.developer.endpoint-security.client?

0

Answer 7

DTS Engineer OP

Apple

Jul ’20

I responded in the other place where you asked this.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

0

Answer 8

TSawano OP

Jul ’20

Give it a couple more weeks and then post back here if your request has gone unanswered.

I waited for two weeks, but I didn't get in touch.
I applied on 06/18/2020 and received the email accepted by "Follow-up: 738155268" on that day.
Should I apply again?

0

Answer 9

DTS Engineer OP

Apple

Jul ’20

Should I apply again?

No. Creating more requests generally makes things worse. At this point you just have to wait for the ES folks to process your request.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

0