Option to disable new "code signature"-related forced alerts?

General discussions about Little Snitch
pixelworship
Posts: 1
Joined: Sun Apr 29, 2018 5:43 pm

Re: Option to disable new "code signature"-related forced alerts?

Post by pixelworship » Sun Apr 29, 2018 5:50 pm

I'm a software developer and constantly having to disable Little Snitch for long stretches of time due to invalid code signatures. Sometimes adding overriding rules with "Ignore code signature" turned off works, sometimes it doesn't and Little Snitch re-adds its blocking rule back. It's making it very difficult to continue using Little Snitch on a development machine.

Some of the culprits:

Android Studio (plus android emulators)
Maya 2018 + Maya 2018 LT (latest update, legit, straight from Autodesk)
Epic Games Launcher + Unreal Engine (UE4Editor)

marco
Objective Development
Objective Development
Posts: 64
Joined: Mon Jul 28, 2014 3:00 pm
Location: Vienna, Austria

Re: Option to disable new "code signature"-related forced alerts?

Post by marco » Mon Apr 30, 2018 9:31 am

cortig wrote:

Code: Select all

$ codesign --verify --verbose=4 /Applications/ColorMunki\ Display/ColorMunki\ Display.app 
/Applications/ColorMunki Display/ColorMunki Display.app: resource envelope is obsolete (version 1 signature)


Could it be that the app hasn't been updated in a long time? Apple did change some things related to the code signature (bumping it to version 2) I think back on Mac OS X 10.9 (five years ago) or some time around that. It looks to me like that app’s signature is from those days. It should work fine, but it’s a sign that its developer really should update their build procedure.

How does Little Snitch treat that code signature? Does it treat the app as not signed? It would really help if you could post screenshots of Little Snitch Connection Alerts with their details expanded (by pressing the D key) for any issues you run into.

marco
Objective Development
Objective Development
Posts: 64
Joined: Mon Jul 28, 2014 3:00 pm
Location: Vienna, Austria

Re: Option to disable new "code signature"-related forced alerts?

Post by marco » Mon Apr 30, 2018 9:33 am

pixelworship wrote:Sometimes adding overriding rules with "Ignore code signature" turned off works, sometimes it doesn't and Little Snitch re-adds its blocking rule back.

Could you please go into more detail? What do you mean by “sometimes it doesn’t work”? Can you create the rules? Are they ignored after you created them?

Post Reply