Deny system-priviledge error with appproxy and dnsproxy

Hi there,

As seen from console error periodically message like "deny system-priviledge" for our appproxy, dnsproxy process as well as our system serivce process.

Thanks in advance for any suggestion.

A few questions here:

  1. Are you noticing any failures for your Network System Extensions when you see these logs?

  2. Are you seeing these logs for specific flows that your provider is handling? For example system flows?

Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com

Thanks Matt for the reply.

Are you noticing any failures for your Network System Extensions when you see these logs?

These logs happens periodically within one minute interval. But it seems Network System Extensions are all healthy.

Are you seeing these logs for specific flows that your provider is handling? For example system flows?

This is a good point. There are some system flows from our system service. Need to verify is it the same without that. Thanks for the suggestion.

Have seen something similar from this forum: https://developer.apple.com/forums/thread/672456

And I can see something similar as:

System Policy: Google Chrome He(618) deny(1) system-privilege 10006

Attach the details as well.

Is that something in common?

Okay, not sure I have much more insight here, but I am glad that this is not affecting your application's functionality.

Are you logging to disk anywhere that could be outside of the Network System Extensions Sandbox?

Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com

That is good point. Will check that in this regard. Also, something interesting to mention: that error is not seen from M1 running the same set of code.

Deny system-priviledge error with appproxy and dnsproxy
 
 
Q