发现问题
gdb调试时golang时
go build -gcflags "-N -l" -ldflags=-compressdwarf=false gdb/main.go
呈现
gdb please check gdb is ** - see taskgated()
环境及现有配置
解决问题
1. 执行以下一个脚本
#!/bin/bash# This script is copied from https://github.com/llvm/llvm-project/blob/master/lldb/scripts/macos-setup-codesign.shCERT="gdb_codesign"function error() { echo error: "$@" 1>&2 exit 1}function cleanup { # Remove generated files rm -f "$TMPDIR/$CERT.tmpl" "$TMPDIR/$CERT.cer" "$TMPDIR/$CERT.key" > /dev/null 2>&1}trap cleanup EXIT# Check if the certificate is already present in the system keychainsecurity find-certificate -Z -p -c "$CERT" /Library/Keychains/System.keychain > /dev/null 2>&1if [ $? -eq 0 ]; then echo Certificate has already been generated and installed exit 0fi# Create the certificate templatecat <<EOF >$TMPDIR/$CERT.tmpl[ req ]default_bits = 2048 # RSA key sizeencrypt_key = no # Protect private keydefault_md = sha512 # MD to useprompt = no # Prompt for DNdistinguished_name = codesign_dn # DN template[ codesign_dn ]commonName = "$CERT"[ codesign_reqext ]keyUsage = critical,digitalSignatureextendedKeyUsage = critical,codeSigningEOFecho Generating and installing gdb_codesign certificate# Generate a new certificateopenssl req -new -newkey rsa:2048 -x509 -days 3650 -nodes -config "$TMPDIR/$CERT.tmpl" -extensions codesign_reqext -batch -out "$TMPDIR/$CERT.cer" -keyout "$TMPDIR/$CERT.key" > /dev/null 2>&1[ $? -eq 0 ] || error Something went wrong when generating the certificate# Install the certificate in the system keychainsudo security add-trusted-cert -d -r trustRoot -p codeSign -k /Library/Keychains/System.keychain "$TMPDIR/$CERT.cer" > /dev/null 2>&1[ $? -eq 0 ] || error Something went wrong when installing the certificate# Install the key for the certificate in the system keychainsudo security import "$TMPDIR/$CERT.key" -A -k /Library/Keychains/System.keychain > /dev/null 2>&1[ $? -eq 0 ] || error Something went wrong when installing the key# Kill task_for_pid access control daemonsudo pkill -f /usr/libexec/taskgated > /dev/null 2>&1# Exit indicating the certificate is now generated and installedexit 0
2. 创立 钥匙串
钥匙串拜访-证书助理-创立证书-名称临时为 gdb-cert
,勾选☑️然我笼罩这些默认值
一路点创立,到了这个地位选 零碎
3. 执行
security find-certificate -c gdb-cert
4. 信赖 钥匙串
右击第二步创立的钥匙串,改为 始终信赖
5. 验证是否被信赖
如果呈现刚刚的 gdb-cert
,代表一切顺利
security dump-trust-settings -d |grep gdb-cert
6. 进行代码签名
- 创立一个xml文件,gdb-entitlement.xml.留神名字对齐
<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <key>com.apple.security.cs.debugger</key> <true/></dict></plist>
- 执行命令
codesign --entitlements gdb-entitlement.xml -fs gdb-cert $(which gdb)
6. 重启电脑
7. 离胜利很近了
再次gdb 查看,须要验证一次明码
而后