search

objective-see / LuLu

LuLu is the free macOS firewall
GNU General Public License v3.0
9.63k stars 449 forks source link

LuLu forgets rules after update #74

Open KizzyCode opened 6 years ago

KizzyCode commented 6 years ago

When I update LuLu, I only have two options:

I'm missing a third option like "Keep existing rules" or sth. like this.

This happened for each update from 0.9.5 over 0.9.6 up to 0.9.7. macOS versions are 10.14 Beta (18A336e) and 10.13.6. I've installed and updated LuLu using Homebrew's casks.

GraOrigin commented 6 years ago

I noticed similar; Some rules are obeyed e.g. mDNSResponder & openvpn (both set 'allow'), others are ignored e.g. keyboardserviced (set 'block') but luckily still being asked if 'block' / 'allow' process Here is the log

https://pastebin.com/Z6XKCtHZ

Also as you can see I block suggestd, which consitently shows up every 3 seconds in log. This process nagging - would love to shut it up for good..

objective-see commented 6 years ago

Great suggestion!

@GraOrigin can you post output of: log show --predicate 'eventMessage CONTAINS "LuLu"' ...as looks like some of the msgs w/ newlines got truncated (maybe because of grep?). As yes, looks there are a few ERRORs I'd like to look into - likely related to processes such as suggestd and their rules (or lack thereof)

GraOrigin commented 6 years ago

strange... ` log show --predicate 'eventMessage CONTAINS "LuLu"' Skipping info and debug messages, pass --info and/or --debug to include. Filtering the log data using "eventMessage CONTAINS "LuLu"" Timestamp Thread Type Activity PID

Log - Default: 0, Info: 0, Debug: 0, Error: 0, Fault: 0 Activity - Create: 0, Transition: 0, Actions: `

objective-see commented 6 years ago

Ah, so recently the format of the rule's file changed...meaning rules from the older alpha & betas are no longer compatible.

A full uninstall, then reinstall should fix this (though yes, you rules will have to be re-created)