<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">macOS now has extensive protection against the execution of hostile code. I can certainly use lldb to debug. However when I want to execute the code, I get this:<div class=""><br class=""><div class=""><div><img apple-inline="yes" id="A3F52EEC-0079-41C3-A683-15F30AD89662" width="511" height="274" src="cid:273E10CE-F45E-443C-8765-3E8136735D3A" class=""></div><div><br class=""></div><div>I only get this once, where it remembers for that terminal session. I could have enabled Developer mode to avoid these entirely, but I prefer to leave the protection in place.</div><div><br class=""></div><div>When coming in on ssh, you can’t get a window like that, and even if you did, you don’t have an administrator password. I think that Developer mode would need to be enabled, and add all the users to the developer group. Developer mode should leave you with no worse protection than the Linux machines.</div><div><br class=""></div><div><br class=""></div><div><blockquote type="cite" class=""><div class="">On Mar 23, 2021, at 8:02 AM, Vladimir Makarov via cfarm-users <<a href="mailto:cfarm-users@lists.tetaneutral.net" class="">cfarm-users@lists.tetaneutral.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class=""><br class="">On 2021-03-22 8:31 p.m., Assaf Gordon via cfarm-users wrote:<br class=""><blockquote type="cite" class="">5. Enabling "Developer Mode" is being investigated.<br class="">As it is a shared (and semi-public) machine, what are the security<br class="">implications of enabling it - e.g.<br class="">- what are the security implementations?<br class="">- can you attach to any of the user processes?<br class="">- can it leads to privilege escalations?<br class="">- can you only use Apple-signed lldb, or any debugger?<br class="">- will it compromise SIP ( <a href="https://en.wikipedia.org/wiki/System_Integrity_Protection" class="">https://en.wikipedia.org/wiki/System_Integrity_Protection</a> ) ?<br class=""></blockquote><br class="">How the developer mode is different from compiler farm linux machines? We have there debuggers which can attach to user processes.<br class=""><br class="">I can hardly name any machine w/o debugger a developer machine.<br class=""><br class=""><br class="">_______________________________________________<br class="">cfarm-users mailing list<br class=""><a href="mailto:cfarm-users@lists.tetaneutral.net" class="">cfarm-users@lists.tetaneutral.net</a><br class="">https://lists.tetaneutral.net/listinfo/cfarm-users<br class=""></div></div></blockquote></div><br class=""></div></div></body></html>