Cannot enable Hardened Runtime Exceptions with Network Extensions on macOS

Hi,

I'm trying to add Hardened Runtime support to our app (VPN-like app), but will need to add the com.apple.security.cs.allow-jit exception since we use an electron-based UI.

Problem is, if I enable any runtime exception, the executable crashes right away (running on xcode with Mac Developer cert).

I was able to dial the project completely down to a main.mm without any dependencies to make sure it wasn't related to anything else.

Am I triggering something expected or is this a bug of some sort?

Please advise, let me know what logs can I send.

Replies

Is it your container app that needs com.apple.security.cs.allow-jit? Or the Network Extension provider itself?

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

Is it your container app that needs com.apple.security.cs.allow-jit? Or the Network Extension provider itself?


It is my container app, but if I understand correctly, I need the same set of capabilities on the main app (in our case, packet-tunnel-provider)
What macOS version are you hitting this on?

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"
This was tested on Catalina

This was tested on Catalina

Please retest on macOS 11 and let me know what you see.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com" (r. 68342005) (s. 745407154)