search

sektioneins / SUIDGuard

SUIDGuard - a TrustedBSD Kernel Extension that adds mitigations to protect SUID/SGID processes a bit more
390 stars 52 forks source link

SUIDGuard crashes on 10.11.4 on boot #12

Open dguido opened 8 years ago

dguido commented 8 years ago

There's a brief message about a sigkill on launchd.

Here are the steps to fix:

  1. Boot to Recovery Mode by holding Command+R
  2. If and only if you have FileVault: Open Disk Utility, select your HD partition, and choose File->Unlock
  3. Open Terminal and type (replace Macintosh HD with the name of your hard drive):
    • cd /Volumes/Macintosh HD/Library/Extensions
    • rm -r SUIDGuard.kext
    • touch .
  4. Reboot and your computer should work again, however, SUIDGuard will be removed.
bef commented 8 years ago

The latest SUIDGuard binary available from suidguard.com was compiled for 10.10.5 and is not compatible with 10.11. By coincidence or sheer luck the extension does not crash OSX 10.11.0-3.

bef commented 8 years ago

Ok. I recompiled the module for 10.11: https://github.com/sektioneins/SUIDGuard/releases/download/v1.0.6a/SUIDGuardNG-1.0.6-for-10.11.4.kext.zip

Some of the features of SUIDGuard have already been fixed in 10.11, so a real code update needs to be done some time.

skolesnyk commented 8 years ago

Doesn't work for me. Suidguard is still loaded at boot and crashes launched. Please help. Initially I thought I had bricked my system after updating El Capitan .

UPDATE: I had SIP enabled. Then I've followed instructions on tonymacx86.com for unbootable system. It worked! What a relief! Never going to play with SUIDguard again :)

bef commented 8 years ago

At this point SUIDGuard can only be loaded after boot without crashing. The code needs to be customized for 10.11. Just recompiling the code as I did as a quick-fix is just that - a quick fix. The real work still has to be done.

jj1bdx commented 8 years ago

Looking forward to having an updated version soon as a .dmg package.

CarCode commented 8 years ago

Why I was so stupid to trust this tool? It takes me 3 days to find out why OS X crashes...

Conclusion: Never install such bullshit.

Gerhard

mattie01 commented 8 years ago

Any update on getting a working version for 10.11.4?