Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Ship signed kext #6

Closed
droe opened this issue Jun 16, 2018 · 10 comments
Closed

Ship signed kext #6

droe opened this issue Jun 16, 2018 · 10 comments
Assignees
@droe
Labels
pri:high status:merged-to-develop type:build build type:kext type:pkg packaging
Milestone
0.1.7

Comments

@droe
Copy link
Owner

droe commented Jun 16, 2018

A signed kext is needed for deployments with reliable acquisition of executable image hashes and code signature information. Prerequisite is that I receive a kext signing certificate from Apple. As a workaround, a holder of a kext signing certificate could volunteer to sign xnumon.kext.
@droe
Copy link
Owner Author

droe commented Jun 16, 2018

Also investigate the exact user approval requirements on High Sierra and how to deploy in enterprises without depending on user approval.
https://developer.apple.com/library/archive/technotes/tn2459/_index.html

@droe droe self-assigned this Jun 16, 2018
@droe
Copy link
Owner Author

droe commented Jun 29, 2018 •
edited
Loading

Timeline of communication with Apple:

  • 2018-02-09 [684724033] First request to grant kext signing certificate to team C9BFEG985N, for still unreleased xnumon kext
  • 2018-02-26 [684724033] Canned "request denied" message without giving specific reasons
  • 2018-02-27 [684724033] Follow-up message to Apple explaining that xnumon meets the requirements and asking for specific reasons for denying the request
  • 2018-03-25 [687763423] Second request to grant kext signing certificate to team C9BFEG985N, for still unreleased xnumon kext
  • 2018-06-18 [693392828] Third request to grant kext signing certificate to team C9BFEG985N, for the released xnumon kext
  • 2018-06-29 [100573865816] Phone call to Apple Developer Support following a recommendation from Product Security, could not resolve, promised follow-up by mail

@droe
Copy link
Owner Author

droe commented Jun 29, 2018

  • 2018-06-29 [100573865816] Follow-up by mail, again explained the need for a kext as well as the business need for xnumon

Repository owner locked and limited conversation to collaborators Jun 29, 2018
Repository owner unlocked this conversation Jun 29, 2018
@droe
Copy link
Owner Author

droe commented Jul 2, 2018 •
edited
Loading

  • 2018-07-02 [100573865816] Apple replies that they cannot read the text/plain body of my message; re-sent them a PDF printout done using Mail.app, which incidentally, can read my message just fine

@droe
Copy link
Owner Author

droe commented Jul 4, 2018

  • 2018-07-04 [100573865816] Apple replies that they are reviewing the inquiry and will get back soon.

@droe droe added the label Jul 14, 2018
@droe droe added this to the 0.2.0 milestone Jul 14, 2018
@droe droe mentioned this issue Jul 15, 2018
Open
@droe droe mentioned this issue Jul 23, 2018
Open
@droe droe added type:kext type:pkg packaging labels Aug 1, 2018
@droe
Copy link
Owner Author

droe commented Aug 7, 2018

  • 2018-08-07 [100573865816] Asked for an update after a month without any news.

@droe
Copy link
Owner Author

droe commented Aug 9, 2018

  • 2018-08-09 [100573865816] Received update that they are reviewing the request and will get back accordingly.

@droe
Copy link
Owner Author

droe commented Sep 20, 2018

  • 2018-09-19 [100573865816] Request for kext signing certificate granted

Expect a point release with signed kext soon.

@droe
Copy link
Owner Author

droe commented Sep 20, 2018

Should verify identity of userspace process attaching to the kext (#45) along with shipping a signed kext.

@droe droe modified the milestones: 0.2.0, 0.1.7 Sep 20, 2018
@droe
Copy link
Owner Author

droe commented Sep 20, 2018

The required infrastructure changes are in develop-0.1.7, to be released after some more testing. Closing this issue.

@droe droe closed this as completed Sep 20, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@droe droe

Labels
pri:high status:merged-to-develop type:build build type:kext type:pkg packaging
Projects
None yet
Milestone
0.1.7
Development

No branches or pull requests
1 participant
@droe