dotnet / dotnet/diagnostics

[macos] Shipping dotnet-* tools unsigned

Open
#1,942 1 comment 0 reactions 2 assignees Claimed by @tommcdon View on GitHub
arm64 bug engineering
Dominant language
C++
Stars
1.3k
Forks
404
Avg merge
2d 5h
Merged PRs (30d)
35

Description

### Description

The released global diagnostic tools are not signed.

For instance
```
codesign -v $(which dotnet-sos)

% codesign -v $(which dotnet-sos)
/Users/stmaclea/.dotnet/tools/dotnet-sos: code object is not signed at all
In architecture: arm64
```

This is problematic for Apple Silicon because it runs on Big Sur and the kernel will automatically kill all unsigned binaries.

```
zsh: killed /Users/stmaclea/.dotnet/tools/dotnet-sos
```

It is not clear whether this affects all Big-Sur architectures.

/cc @hoyosjs @mikem8361 @vitek-karas

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.