[cfarm-users] New Apple Mac M1 machine (gcc304)

Vladimir Makarov vmakarov at redhat.com
Tue Mar 23 16:02:04 CET 2021


On 2021-03-22 8:31 p.m., Assaf Gordon via cfarm-users wrote:
> 5. Enabling "Developer Mode" is being investigated.
> As it is a shared (and semi-public) machine, what are the security
> implications of enabling it - e.g.
> - what are the security implementations?
> - can you attach to any of the user processes?
> - can it leads to privilege escalations?
> - can you only use Apple-signed lldb, or any debugger?
> - will it compromise SIP ( 
> https://en.wikipedia.org/wiki/System_Integrity_Protection ) ?

How the developer mode is different from compiler farm linux machines?  
We have there debuggers which can attach to user processes.

I can hardly name any machine w/o debugger a developer machine.




More information about the cfarm-users mailing list