3 ms·

The bug for this was fixed in Tahoe

• viraptor 1y ago
  For the whole dtrace system?
  • saagarjha 1y ago
    Yes
    • StrangeDoctor 1y ago
      Fantastic news, thanks for sharing. I stopped looking into it after some spectacularly bad hard lockups, some in prod…
      • saagarjha 1y ago
        Considering you need to turn off SIP to use it, I would not recommend using DTrace in prod…
        • viraptor 1y ago
          You need to escalate to root to run it anyway. If anyone can get root on my laptop, there's nothing that SIP can realistically protect me from. Actually, if anyone can get access to my user outside of sandbox, everything I care about is already exposed. (Also, you can disable it only for dtrace if you want)
          • saagarjha 1y ago
            Turning off SIP allows for trivial escalation to root usually
            • viraptor 1y ago
              That's quite vague. Got any links with the details?
              • saagarjha 1y ago
                Here's an example: https://gist.github.com/ChiChou/e3a50f00853b2fbfb1debad46e501121 https://gist.github.com/ChiChou/e3a50f00853b2fbfb1debad46e50...