共计 2426 个字符,预计需要花费 7 分钟才能阅读完成。
发现问题
gdb 调试时 golang 时
go build -gcflags "-N -l" -ldflags=-compressdwarf=false gdb/main.go
呈现
gdb please check gdb is ** - see taskgated()
环境及现有配置
解决问题
1. 执行以下一个脚本
#!/bin/bash
# This script is copied from https://github.com/llvm/llvm-project/blob/master/lldb/scripts/macos-setup-codesign.sh
CERT="gdb_codesign"
function error() {
echo error: "$@" 1>&2
exit 1
}
function cleanup {
# Remove generated files
rm -f "$TMPDIR/$CERT.tmpl" "$TMPDIR/$CERT.cer" "$TMPDIR/$CERT.key" > /dev/null 2>&1
}
trap cleanup EXIT
# Check if the certificate is already present in the system keychain
security find-certificate -Z -p -c "$CERT" /Library/Keychains/System.keychain > /dev/null 2>&1
if [$? -eq 0]; then
echo Certificate has already been generated and installed
exit 0
fi
# Create the certificate template
cat <<EOF >$TMPDIR/$CERT.tmpl
[req]
default_bits = 2048 # RSA key size
encrypt_key = no # Protect private key
default_md = sha512 # MD to use
prompt = no # Prompt for DN
distinguished_name = codesign_dn # DN template
[codesign_dn]
commonName = "$CERT"
[codesign_reqext]
keyUsage = critical,digitalSignature
extendedKeyUsage = critical,codeSigning
EOF
echo Generating and installing gdb_codesign certificate
# Generate a new certificate
openssl req -new -newkey rsa:2048 -x509 -days 3650 -nodes -config "$TMPDIR/$CERT.tmpl" -extensions codesign_reqext -batch -out "$TMPDIR/$CERT.cer" -keyout "$TMPDIR/$CERT.key" > /dev/null 2>&1
[$? -eq 0] || error Something went wrong when generating the certificate
# Install the certificate in the system keychain
sudo security add-trusted-cert -d -r trustRoot -p codeSign -k /Library/Keychains/System.keychain "$TMPDIR/$CERT.cer" > /dev/null 2>&1
[$? -eq 0] || error Something went wrong when installing the certificate
# Install the key for the certificate in the system keychain
sudo security import "$TMPDIR/$CERT.key" -A -k /Library/Keychains/System.keychain > /dev/null 2>&1
[$? -eq 0] || error Something went wrong when installing the key
# Kill task_for_pid access control daemon
sudo pkill -f /usr/libexec/taskgated > /dev/null 2>&1
# Exit indicating the certificate is now generated and installed
exit 0
2. 创立 钥匙串
钥匙串拜访 - 证书助理 - 创立证书 - 名称临时为 gdb-cert
,勾选☑️然我笼罩这些默认值
一路点创立,到了这个地位选 零碎
3. 执行
security find-certificate -c gdb-cert
4. 信赖 钥匙串
右击第二步创立的钥匙串,改为 始终信赖
5. 验证是否被信赖
如果呈现刚刚的 gdb-cert
,代表一切顺利
security dump-trust-settings -d |grep gdb-cert
6. 进行代码签名
- 创立一个 xml 文件,gdb-entitlement.xml. 留神名字对齐
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>com.apple.security.cs.debugger</key>
<true/>
</dict>
</plist>
- 执行命令
codesign --entitlements gdb-entitlement.xml -fs gdb-cert $(which gdb)
6. 重启电脑
7. 离胜利很近了
再次 gdb 查看, 须要验证一次明码
而后
其实你看这里更分明了
正文完