launchctl fails to load KEXT while starting the Deamon

Hi Team,


I am working with macosx 10.13 and while trying to start deamon using launchctl start bundleid , the deamon started but the KEXT not loaded.

Same command works for 10.9,10.10,10.11 and 10.12.


I got the below error while executing launchctl start bundleid


SandboxViolation: mdworker(1432) deny(1) system-fsctl 4a0e

SandboxViolation: mdworker(1432) deny(1) system-fsctl 4a0e

SandboxViolation: mdworker(1432) deny(1) system-fsctl 4a0e


Could you let me know what could be the problem why it is denying.


Thanking you in advance.


Regards,

Ramesh

Accepted Reply

There is a new technote covering this macOS High Sierra feature:


Technical Note TN2459

Secure Kernel Extension Loading

https://developer.apple.com/library/content/technotes/TN2459/_index.html#//apple_ref/doc/uid/DTS40017658


--gc

Replies

macOS 10.13 will require that KEXTs be specifically ‘blessed’ by the user in the Security preferences panel. See this thread.

Share and Enjoy

Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

Hi,

Could you let me know how can we add the kernel extension to Security preferences panel ??

Thanks,

Ramesh

Could you let me know how can we add the kernel extension to Security preferences panel ??

Attempting to load the KEXT should cause a note to show up in that preferences panel, along with a Allow button.

Share and Enjoy

Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

This stopped working for me. Is there any way to force it to re-prompt?

Is there any way to force it to re-prompt?

The KEXT load request times out after a while (IIRC it’s 30 minutes). I found that I can get it back by attempting to load the KEXT a second time. I posted my exact steps over on the other thread.

Share and Enjoy

Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

There is a new technote covering this macOS High Sierra feature:


Technical Note TN2459

Secure Kernel Extension Loading

https://developer.apple.com/library/content/technotes/TN2459/_index.html#//apple_ref/doc/uid/DTS40017658


--gc

This is fixed in High Sierra Beta 3.

The explanation is fine but it does mnot help me as the non-developer who is seeing 200+ of these messages per second. It is especially nice that Apple does not specify the kext that is causing the problem.


Questinn: what am I supposed to do as a user?

>...as a user


Feel your pain, but…wrong forums.


Apple Developer Forums is a community for discussing developer-level issues with Apple’s SDKs and tools. It is not an official Apple support channel, even for developer issues, and it’s definitely not the right place to feedback/get answers about user-level issues.


User-centric queries/comments such as this are perhaps best put to AppleCare's public community support forums, Apple's twitter support account and/or Apple’s YouTube Support Channel vs. risking off-topic here in the DevForums, thanks and good luck.

https://support.apple.com/


Users can feedback via http://www.apple.com/feedback/ - Individuals using betas are free to use the Feedback Assistant; Devs can use the 'Report Bugs' link, below right.