4 ms·
I disable SIP because I don't want to use an OS where I cannot debug programs which did not consent to be debugged. macOS makes it impossible to inspect failure
by nyanpasu64 3y ago
I disable SIP because I don't want to use an OS where I cannot debug programs which did not consent to be debugged. macOS makes it impossible to inspect failure states I encounter in normal usage (like I can on Linux with debuginfod enabled, or Windows with .pdb files) without first rebuilding the program in debug mode.
- _joel 3y agoSurely you can do this with xattr?
- smcleod 3y agoI’ve never had problems debugging anything with SIP on.
- deleted 3y ago[deleted]
- nyanpasu64 3y agoMy experience is that I was unable to debug Maestral (a Python program) crashing in native Cocoa bindings in LLDB, because the interpreter did not allow itself to be debugged. Mozilla says Firefox acts the same way at https://firefox-source-docs.mozilla.org/contributing/debugging/debugging_on_macos.html https://firefox-source-docs.mozilla.org/contributing/debuggi.... It's possible there's some workaround I'm not aware of, but I ended up disabling SIP just like every non-macOS computer I own.
- duped 3y agoWere you debugging a local install of python, or the default python installed as a part of the OS? If the latter, it's definitely a footgun but you shouldn't be using it for applications. It's a legacy binary for scripts.
- saagarjha 3y agoYou can't debug system processes or anything with the hardened runtime enabled.