I have a stand-alone executable that has the endpoint-security entitlement. It has taken a bit to get this signed because it's build using a makefile and clang++, not using xcode.
I have copied this executable to another mac, and try to run it, but it is getting disallowed because "no eligible provisioning profiles found"
sh-3.2# codesign --verify -vvvv -R='anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.1] exists and (certificate leaf[field.1.2.840.113635.100.6.1.2] exists or certificate leaf[field.1.2.840.113635.100.6.1.4] exists)' ./protect_am
./protect_am: valid on disk
./protect_am: satisfies its Designated Requirement
test-requirement: code failed to satisfy specified code requirement(s)
So this seems to indicate it is missing the provisioning profile.
The signing seems correct:
sh-3.2# codesign -d --entitlements :- ./protect_am
Executable=/Library/Application Support/Fidelis/Endpoint/Platform/services/protect/protect_am
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>com.apple.application-identifier</key>
<string>AM********.******.protect-am</string>
<key>com.apple.developer.endpoint-security.client</key>
<true/>
<key>com.apple.developer.team-identifier</key>
<string>AM********</string>
<key>com.apple.security.cs.allow-jit</key>
<true/>
</dict>
</plist>
I have no idea how to get this to run. What am I missing?
