For debugging and bug-finding workflows on Darwin, support launching processes with memory tagging for binaries that are not entitled. This will cause the process to behave as if the binary was entitled with: ``` <key>com.apple.security.hardened-process.checked-allocations</key> <true/> ``` This has no effect on hardware without MTE support. --------- Co-authored-by: Jonas Devlieghere <jonas@devlieghere.com>
16 lines
222 B
Makefile
16 lines
222 B
Makefile
C_SOURCES := main.c
|
|
|
|
EXE := uaf
|
|
|
|
binary-plain: uaf
|
|
binary-entitled: uaf sign
|
|
|
|
all: binary-entitled
|
|
|
|
include Makefile.rules
|
|
|
|
sign: mte-entitlements.plist uaf
|
|
ifeq ($(OS),Darwin)
|
|
codesign -s - -f --entitlements $^
|
|
endif
|