Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

remote server on macOS: Sign with entitlements #18863

Merged
merged 1 commit into from
Oct 8, 2024

Conversation

mrnugget
Copy link
Member

@mrnugget mrnugget commented Oct 8, 2024

This does two things:

  • Prevent feature unification

  • Sign the remote-server binary with the same entitlements we use for Zed because we saw this in crash report:

    Crashed Thread:        4  Dispatch queue: com.apple.root.user-initiated-qos
    
    Exception Type:        EXC_BAD_ACCESS (SIGKILL (Code Signature Invalid))
    Exception Codes:       UNKNOWN_0x32 at 0x0000000103636644
    Exception Codes:       0x0000000000000032, 0x0000000103636644
    
    Termination Reason:    Namespace CODESIGNING, Code 2 Invalid Page
    
    VM Region Info: 0x103636644 is in 0x103634000-0x103638000;  bytes after start: 9796  bytes before end: 6587
          REGION TYPE                    START - END         [ VSIZE] PRT/MAX SHRMOD  REGION DETAIL
          VM_ALLOCATE                 103630000-103634000    [   16K] r--/rwx SM=ZER
    --->  VM_ALLOCATE                 103634000-103638000    [   16K] r-x/rwx SM=COW
          VM_ALLOCATE                 103638000-103640000    [   32K] r--/rwx SM=ZER
    

    Which sounds a lot like codesigning/jit/entitlements stuff.

Release Notes:

  • N/A

This does two things:

- Prevent feature unification
- Sign the remote-server binary with the same entitlements we use for
  Zed because we saw this in crash report:

      Crashed Thread:        4  Dispatch queue: com.apple.root.user-initiated-qos

      Exception Type:        EXC_BAD_ACCESS (SIGKILL (Code Signature Invalid))
      Exception Codes:       UNKNOWN_0x32 at 0x0000000103636644
      Exception Codes:       0x0000000000000032, 0x0000000103636644

      Termination Reason:    Namespace CODESIGNING, Code 2 Invalid Page

      VM Region Info: 0x103636644 is in 0x103634000-0x103638000;  bytes after start: 9796  bytes before end: 6587
            REGION TYPE                    START - END         [ VSIZE] PRT/MAX SHRMOD  REGION DETAIL
            VM_ALLOCATE                 103630000-103634000    [   16K] r--/rwx SM=ZER
      --->  VM_ALLOCATE                 103634000-103638000    [   16K] r-x/rwx SM=COW
            VM_ALLOCATE                 103638000-103640000    [   32K] r--/rwx SM=ZER

  Which sounds a lot like codesigning/jit/entitlements stuff.

Co-authored-by: Piotr <[email protected]>
Co-authored-by: Bennet <[email protected]>
@mrnugget mrnugget added the run-bundling Configures PR to run the bundle step label Oct 8, 2024
@cla-bot cla-bot bot added the cla-signed The user has signed the Contributor License Agreement label Oct 8, 2024
@zed-industries-bot
Copy link

zed-industries-bot commented Oct 8, 2024

Warnings
⚠️
remote server on macOS: Sign with entitlements
^

Write PR titles using sentence case.

Have feedback on this plugin? Let's hear it!

Generated by 🚫 dangerJS against 3ed6e96

@mrnugget mrnugget changed the title remote server on macOS: sign with entitlements remote server on macOS: Sign with entitlements Oct 8, 2024
@mrnugget mrnugget merged commit ff7aa02 into main Oct 8, 2024
10 checks passed
@mrnugget mrnugget deleted the attempt-remote-server-binary branch October 8, 2024 15:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cla-signed The user has signed the Contributor License Agreement run-bundling Configures PR to run the bundle step
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants