Must SIP be disabled for this to run?

objective-see / ProcessMonitor

Process Monitor Library (based on Apple's new Endpoint Security Framework)

GNU General Public License v3.0

424 stars 65 forks source link

Must SIP be disabled for this to run? #3

Closed jayhorowitz closed 3 years ago

jayhorowitz commented 3 years ago

I followed the prompt displayed by the app, but received this error in 10.15.7:

ProcessMonitor[90013:2788609] ES_NEW_CLIENT_RESULT_ERR_NOT_PERMITTED: "The caller is not permitted to connect. They lack Transparency, Consent, and Control (TCC) approval form the user.

cocos543 commented 3 years ago

Yep.

objective-see commented 3 years ago

No, it can run while SIP is enabled.

Please following the instructions here: https://objective-see.com/products/utilities.html ...which include the (Apple required) prerequisite of giving Terminal.app Full Disk Access

cocos543 commented 3 years ago

No, it can't be run in M1 MacOS11.5 when SIP is Enable~

2021-09-14 17:19:15.620 ProcessMonitor[9202:55041] ERROR: es_new_client() failed 2021-09-14 17:19:15.620 ProcessMonitor[9202:55041] ES_NEW_CLIENT_RESULT_ERR_NOT_ENTITLED: "The caller is not properly entitled to connect"

objective-see commented 3 years ago

@cocos543 ....you just have to give Terminal.app full disk access (as noted above), then it will work even with SIP enabled.

See below: