Posts

Post not yet marked as solved
3 Replies
2.3k Views
Hi, I am facing an issue while loading kext. I am trying to install a kext using the following command sudo kextutil -v 2 /Applications/<Name>.kext I am getting the output as following: Defaulting to kernel file '/System/Library/Kernels/kernel' Executing: /usr/bin/kmutil load --bundle-path /Applications/<Name>.kext Extension with identifiers <kext package name> not approved to load. Please approve using System Preferences. But I am unable to get the allow button in System Preferences. Do I need to change anything in kext ? I installed a fresh big sur OS. I checked the logs using sudo kmutil dumpstate Output: multiple candidates found for <kext package>: kext package v6.1.16 (E4538EA2-1B4A-3959-97BA-E58E470CD8E1) in executable kext bundle kext package at /Library/StagedExtensions/Applications/AppName.app/Contents/Resources/<Name>.kext signed @team(TEAMID) (97dcda8494cbc79272a0a5ca71efe4961869f502) flags [0, 1, 4, 5, 9, 14, 16] kext package v6.1.16 (E4538EA2-1B4A-3959-97BA-E58E470CD8E1) in executable kext bundle kext package at /Library/StagedExtensions/Applications/AppName.app/Contents/MacOS/<Name>.kext signed @team(TEAMID) (609d112229428341e7a542f7fd64cb7d04529619) entitlements: [com.apple.security.personal-information.location: true, com.apple.security.personal-information.addressbook: true, com.apple.security.cs.disable-library-validation: true, com.apple.security.cs.allow-jit: true, com.apple.security.personal-information.photos-library: true, com.apple.security.device.audio-input: true, com.apple.security.cs.allow-dyld-environment-variables: true, com.apple.security.cs.debugger: true, com.apple.security.device.camera: true, com.apple.security.cs.allow-unsigned-executable-memory: true, com.apple.security.personal-information.calendars: true, com.apple.security.get-task-allow: true, com.apple.security.cs.disable-executable-page-protection: true, com.apple.security.automation.apple-events: true] flags [0, 1, 4, 5, 9, 14, 16] <package name> v6.1.16 (E4538EA2-1B4A-3959-97BA-E58E470CD8E1) in executable kext bundle <package name> at /Library/StagedExtensions/Applications/<Name>.kext signed @team(QX5T8D6EDU) (97dcda8494cbc79272a0a5ca71efe4961869f502) flags [0, 1, 4, 5, 9, 14, 16]
Posted Last updated
.
Post not yet marked as solved
1 Replies
666 Views
I signed my kext and uploaded it toxcrun altool --notarize-app --primary-bundle-id "bundle.id" --username "username@blah.com" --password "mypassword" --file tobenotarized.kextI got a mail saying that Your Mac software has been notarized. You can now export this software and distribute it directly to users.So i stapled the ticket usingxcrun stapler staple tobenotarized.kextBut whenever i try loading it with sudo kextload tobenotarized.kextIt gives mekext failed to load - (libkern/kext) system policy prevents loading; check the system/kernel logs for errors or try kextutil(8).I tried to check with following commandspctl -a -vv -t install tobenotarized.kextIt saystobenotarized.kext: acceptedsource=Notarized Developer IDorigin=Developer ID Application: myteam name and idI even checked the certificates bycodesign -d --extract-certificates tobenotarized.kextit shows the correct extension and certificate.How can i check it more or debug it more ?? I am missing something obvious ?UPDATE :- Kext loads fine when i disable hardened runtime but whenever i enable hardened runtime and then try to load kext with kextutil i get this error. Possible reasons for that, if anyone can guide me,, i have been stuck at this for 3-4 days now.
Posted Last updated
.