Outdated entitlement instructions on GDB WIki

Outdated entitlement instructions on GDB WIki

[Adrian Ho]

Hi!

I've tested and verified that the single entitlement documented in 
1.3.1. of https://sourceware.org/gdb/wiki/PermissionsDarwin is 
insufficient for macOS Catalina at least, and possibly even for Mojave.

Instead, I've had to use an expanded set of entitlements documented at 
https://www.thomasvitale.com/how-to-setup-gdb-and-eclipse-to-debug-c-files-on-macos-sierra/, 
i.e.:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
"http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
     <key>com.apple.security.cs.allow-jit</key>
     <true/>
<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
     <true/>
<key>com.apple.security.cs.allow-dyld-environment-variables</key>
     <true/>
<key>com.apple.security.cs.disable-library-validation</key>
     <true/>
<key>com.apple.security.cs.disable-executable-page-protection</key>
     <true/>
     <key>com.apple.security.cs.debugger</key>
     <true/>
     <key>com.apple.security.get-task-allow</key>
     <true/>
</dict>
</plist>

Appreciate it if someone could update the above wiki page, as I'm not 
permitted to do it myself. Thanks much!

Best Regards,
Adrian

Re: Outdated entitlement instructions on GDB WIki

[Joel Brobecker]

Hi Adrian,

> I've tested and verified that the single entitlement documented in 1.3.1. of
> https://sourceware.org/gdb/wiki/PermissionsDarwin is insufficient for macOS
> Catalina at least, and possibly even for Mojave.
> 
> Instead, I've had to use an expanded set of entitlements documented at https://www.thomasvitale.com/how-to-setup-gdb-and-eclipse-to-debug-c-files-on-macos-sierra/,
> i.e.:
> 
> <?xml version="1.0" encoding="UTF-8"?>
> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
> "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
> <plist version="1.0">
> <dict>
>     <key>com.apple.security.cs.allow-jit</key>
>     <true/>
> <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
>     <true/>
> <key>com.apple.security.cs.allow-dyld-environment-variables</key>
>     <true/>
> <key>com.apple.security.cs.disable-library-validation</key>
>     <true/>
> <key>com.apple.security.cs.disable-executable-page-protection</key>
>     <true/>
>     <key>com.apple.security.cs.debugger</key>
>     <true/>
>     <key>com.apple.security.get-task-allow</key>
>     <true/>
> </dict>
> </plist>
> 
> Appreciate it if someone could update the above wiki page, as I'm not
> permitted to do it myself. Thanks much!

I think this is better done by someone who has actual experience
on MacOS X. Would you be willing to perform the update, if we gave
you write access to the Wiki? All you have to do is create an account,
and then send me your ID (you can send it to me privately), and I will
add you.

-- 
Joel

Re: Outdated entitlement instructions on GDB WIki

[Tom Tromey]

>>>>> "Adrian" == Adrian Ho <co+sourceware@03s.net> writes:

Adrian> Instead, I've had to use an expanded set of entitlements documented at
Adrian> https://www.thomasvitale.com/how-to-setup-gdb-and-eclipse-to-debug-c-files-on-macos-sierra/, 
Adrian> i.e.:

Could you try combining your change with this patch:

https://sourceware.org/pipermail/gdb-patches/2019-January/154866.html

... and see if it works for you?

It would be nice to make this process a bit simpler, I think.

Tom