4 ms·

Considering you need to turn off SIP to use it, I would not recommend using DTrace in prod…

• viraptor 1y ago
  You need to escalate to root to run it anyway. If anyone can get root on my laptop, there's nothing that SIP can realistically protect me from. Actually, if anyone can get access to my user outside of sandbox, everything I care about is already exposed. (Also, you can disable it only for dtrace if you want)
  • saagarjha 1y ago
    Turning off SIP allows for trivial escalation to root usually
    • viraptor 1y ago
      That's quite vague. Got any links with the details?
      • saagarjha 1y ago
        Here's an example: https://gist.github.com/ChiChou/e3a50f00853b2fbfb1debad46e501121 https://gist.github.com/ChiChou/e3a50f00853b2fbfb1debad46e50...