gdb code signing on darwin?

gdb code signing on darwin?

[Jack Howarth]

  Has anyone made progress on solving the issue of the code signing requirement
for FSF gdb on darwin 10.5.8 and Snow Leopard? In particular, looking at...

http://developer.apple.com/mac/library/documentation/Security/Conceptual/CodeSigningGuide/Procedures/Procedures.html#//apple_ref/doc/uid/TP40005929-CH4-SW2

I am wondering if it is possible to generate a self signed certificate from command
line tools which will solve the problem on a per-machine basis. I ask because in
fink, we could run a post install script that would sign the FSF gdb to run properly
on the specific machine that the software was installed on. However it is unclear to
me if one needs additional entitlements beyond those provided by self signed keys
for gdb to have access to the kernel ports. Thanks in advance for any updates on
this issue as I am considering adding a gdb-7.x package to fink but the current
requirement that gdb be run as root is problematic.
           Jack

Re: gdb code signing on darwin?

[Tristan Gingold]

On Dec 17, 2009, at 6:13 PM, Jack Howarth wrote:

>  Has anyone made progress on solving the issue of the code signing requirement
> for FSF gdb on darwin 10.5.8 and Snow Leopard?

Jack,

did you read this wiki entry ?

http://sourceware.org/gdb/wiki/BuildingOnDarwin

I hope it explains how to codesign gdb.

> I am wondering if it is possible to generate a self signed certificate from command
> line tools which will solve the problem on a per-machine basis.

I don't know if this is possible.  But this is out of topic for the gdb mailing list.
If you know the answer, do not hesitate to complete the wiki entry.

Tristan.

Re: gdb code signing on darwin?

[Jack Howarth]

On Fri, Dec 18, 2009 at 09:46:46AM +0100, Tristan Gingold wrote:
> 
> On Dec 17, 2009, at 6:13 PM, Jack Howarth wrote:
> 
> >  Has anyone made progress on solving the issue of the code signing requirement
> > for FSF gdb on darwin 10.5.8 and Snow Leopard?
> 
> Jack,
> 
> did you read this wiki entry ?
> 
> http://sourceware.org/gdb/wiki/BuildingOnDarwin
> 
> I hope it explains how to codesign gdb.
> 
> > I am wondering if it is possible to generate a self signed certificate from command
> > line tools which will solve the problem on a per-machine basis.
> 
> I don't know if this is possible.  But this is out of topic for the gdb mailing list.
> If you know the answer, do not hesitate to complete the wiki entry.
> 
> Tristan.

Tristan,
   Thanks for the pointer to the wiki. It appears that, in theory, one should be able
to replace the use of the Keychain Access application with explicit calls to the
'security' command line tool. I'll send you an update for the wiki if I can puzzle out
the exact form for such calls.
           Jack

Re: gdb code signing on darwin?

[Tristan Gingold]

On Dec 18, 2009, at 3:36 PM, Jack Howarth wrote:
> 
> Tristan,
>   Thanks for the pointer to the wiki. It appears that, in theory, one should be able
> to replace the use of the Keychain Access application with explicit calls to the
> 'security' command line tool. I'll send you an update for the wiki if I can puzzle out
> the exact form for such calls.

Great.  Thank you for keeping always an eye on Darwin.

Tristan.