Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #133312 > unrolled thread

Catalina TOO hardened?

Back to article view | Back to comp.sys.mac.system

Contents

  Catalina TOO hardened? Neal Reid <neal@magma.ca> - 2020-07-05 16:57 -0400
    Re: Catalina TOO hardened? Your Name <YourName@YourISP.com> - 2020-07-06 10:24 +1200
      Re: Catalina TOO hardened? Neal Reid <neal@magma.ca> - 2020-07-09 22:47 -0400
        Re: Catalina TOO hardened? Your Name <YourName@YourISP.com> - 2020-07-10 15:18 +1200
    Re: Catalina TOO hardened? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2020-07-06 02:16 +0000
      Re: Catalina TOO hardened? Neal Reid <neal@magma.ca> - 2020-07-09 22:41 -0400
    Re: Catalina TOO hardened? Jolly Roger <jollyroger@pobox.com> - 2020-07-06 17:00 +0000
      Re: Catalina TOO hardened? Neal Reid <neal@magma.ca> - 2020-07-09 22:37 -0400
        Re: Catalina TOO hardened? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2020-07-10 05:48 +0000
        Re: Catalina TOO hardened? Jolly Roger <jollyroger@pobox.com> - 2020-07-10 17:52 +0000

#133312 — Catalina TOO hardened?

I have been stymied trying to run
sudo gpt pr show /dev/disk0
on my Catalina machime. I have allowed full disk access to Terminal (and 
a few other things) but still get "Cannot open /dev/disk0: permission 
denied"

All I want to do is LOOK. Why is that locked down, and how do I get 
around it?

[toc] | [next] | [standalone]

#133316

On 2020-07-05 20:57:50 +0000, Neal Reid said:

> I have been stymied trying to run
> sudo gpt pr show /dev/disk0
> on my Catalina machime. I have allowed full disk access to Terminal (and
> a few other things) but still get "Cannot open /dev/disk0: permission
> denied"
> 
> All I want to do is LOOK. Why is that locked down, and how do I get
> around it?

My guess is that disk0 is the OS restore volume. That is purposely 
hidden and completely locked down to stop it being altered.

[toc] | [prev] | [next] | [standalone]

#133355

In article <rdtjui$1tvg$1@gioia.aioe.org>,
 Your Name <YourName@YourISP.com> wrote:

> On 2020-07-05 20:57:50 +0000, Neal Reid said:
> 
> > I have been stymied trying to run
> > sudo gpt pr show /dev/disk0
> > on my Catalina machime. I have allowed full disk access to Terminal (and
> > a few other things) but still get "Cannot open /dev/disk0: permission
> > denied"
> > 
> > All I want to do is LOOK. Why is that locked down, and how do I get
> > around it?
> 
> My guess is that disk0 is the OS restore volume. That is purposely 
> hidden and completely locked down to stop it being altered.
Thank you for playing - but I'm more experienced than that. /dev/disk0 
is the first DRIVE in the chain - nothing to do with a partition. (I've 
been using gpt for years. I went from El Capitan, where it works, to 
Catalina, where it doesn't. Don't know where security was made so tight 
a person couldn't run his own machine...

[toc] | [prev] | [next] | [standalone]

#133357

On 2020-07-10 02:47:11 +0000, Neal Reid said:
> In article <rdtjui$1tvg$1@gioia.aioe.org>,
>  Your Name <YourName@YourISP.com> wrote:
>> On 2020-07-05 20:57:50 +0000, Neal Reid said:
>>> 
>>> I have been stymied trying to run
>>> sudo gpt pr show /dev/disk0
>>> on my Catalina machime. I have allowed full disk access to Terminal (and
>>> a few other things) but still get "Cannot open /dev/disk0: permission
>>> denied"
>>> 
>>> All I want to do is LOOK. Why is that locked down, and how do I get
>>> around it?
>> 
>> My guess is that disk0 is the OS restore volume. That is purposely
>> hidden and completely locked down to stop it being altered.
> 
> Thank you for playing - but I'm more experienced than that. /dev/disk0
> is the first DRIVE in the chain - nothing to do with a partition. (I've
> been using gpt for years. I went from El Capitan, where it works, to
> Catalina, where it doesn't. Don't know where security was made so tight
> a person couldn't run his own machine...

You can do whatever you want, including doing a full erase to install 
only Windoze or Linux.

Another possibility on Fusion drive Macs is that it is part of that 
hybrid SSD-hard drive combination and you probably shouldn't be 
accessing either part directly.

Whatever it actually is, if you can't access disk0, then there will be 
a good reason for it and you don't need to access it anyway. If you are 
a proper signed up developer, then someone at Apple should be at least 
able to tell you what it is.

[toc] | [prev] | [next] | [standalone]

#133320

In message <neal-E951F8.16575005072020@46.sub-75-242-165.myvzw.com> Neal Reid <neal@magma.ca> wrote:
> I have been stymied trying to run
> sudo gpt pr show /dev/disk0
> on my Catalina machime. I have allowed full disk access to Terminal (and 
> a few other things) but still get "Cannot open /dev/disk0: permission 
> denied"

You probably have to give access to the actual executable, not Terminal.

> All I want to do is LOOK. Why is that locked down, and how do I get 
> around it?

You can look at it with diskutil.

-- 
Footnote on the High Energy Magic building: It was here that the
	thaum, hitherto believed to be the smallest possible particle of
	magic, was successfully demonstrated to be made up of resons
	(lit: 'Thing-ies) or reality fragments. Currently research
	indicates that each reson is itself made up of a combination of
	at least five 'flavours', known as 'up', 'down', 'sideways', 'sex
	appeal' and 'peppermint'.

[toc] | [prev] | [next] | [standalone]

#133354

In article <slrnrg52c1.2p5c.g.kreme@ProMini.lan>,
 Lewis <g.kreme@gmail.com.dontsendmecopies> wrote:

> In message <neal-E951F8.16575005072020@46.sub-75-242-165.myvzw.com> Neal Reid 
> <neal@magma.ca> wrote:
> > I have been stymied trying to run
> > sudo gpt pr show /dev/disk0
> > on my Catalina machime. I have allowed full disk access to Terminal (and 
> > a few other things) but still get "Cannot open /dev/disk0: permission 
> > denied"
> 
> You probably have to give access to the actual executable, not Terminal
Tried that - for everything I could think of. No joy
> 
> > All I want to do is LOOK. Why is that locked down, and how do I get 
> > around it?
> 
> You can look at it with diskutil.
How do I convince diskutil to give me the full GUID for a 
disk/partition? And any other details I will need to run Linux?

[toc] | [prev] | [next] | [standalone]

#133330

On 2020-07-05, Neal Reid <neal@magma.ca> wrote:
> I have been stymied trying to run sudo gpt pr show /dev/disk0 on my
> Catalina machime. I have allowed full disk access to Terminal (and a
> few other things) but still get "Cannot open /dev/disk0: permission
> denied"
>
> All I want to do is LOOK. Why is that locked down, and how do I get
> around it?

I haven't ever used gpt. Is there some piece of information gpt gives
you that diskutil doesn't?

Anyway, to get around this, just temporarily disable SIP.  Be sure to
re-enable it after you are done.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]

#133353

In article <hmh3l0Fero4U1@mid.individual.net>,
 Jolly Roger <jollyroger@pobox.com> wrote:

> On 2020-07-05, Neal Reid <neal@magma.ca> wrote:
> > I have been stymied trying to run sudo gpt pr show /dev/disk0 on my
> > Catalina machime. I have allowed full disk access to Terminal (and a
> > few other things) but still get "Cannot open /dev/disk0: permission
> > denied"
> >
> > All I want to do is LOOK. Why is that locked down, and how do I get
> > around it?
> 
> I haven't ever used gpt. Is there some piece of information gpt gives
> you that diskutil doesn't?
Yes - full disk GUID and bits necessary for running Linux 
> Anyway, to get around this, just temporarily disable SIP.  Be sure to
> re-enable it after you are done.
Not the point of the question gpt is an example of something I used 
daily before Apple put a barbed wire fence around their walled garden 
This is MY machine. I did my first Mac development in 1984. I should be 
allowed to take responsibility for my own machine.

I am sure I won't be the 1st developer to throw up my hands and go to 
Linux...

[toc] | [prev] | [next] | [standalone]

#133376

In message <neal-4E5613.22375809072020@46.sub-75-242-165.myvzw.com> Neal Reid <neal@magma.ca> wrote:
> In article <hmh3l0Fero4U1@mid.individual.net>,
>  Jolly Roger <jollyroger@pobox.com> wrote:

>> On 2020-07-05, Neal Reid <neal@magma.ca> wrote:
>> > I have been stymied trying to run sudo gpt pr show /dev/disk0 on my
>> > Catalina machime. I have allowed full disk access to Terminal (and a
>> > few other things) but still get "Cannot open /dev/disk0: permission
>> > denied"
>> >
>> > All I want to do is LOOK. Why is that locked down, and how do I get
>> > around it?
>> 
>> I haven't ever used gpt. Is there some piece of information gpt gives
>> you that diskutil doesn't?

> Yes - full disk GUID and bits necessary for running Linux 

So you have never used diskutil then. Perhaps you should read a man
page. Or, you know, maybe just google?

> Not the point of the question gpt is an example of something I used 
> daily before Apple put a barbed wire fence around their walled garden 
> This is MY machine. I did my first Mac development in 1984. I should be 
> allowed to take responsibility for my own machine.

And you can.

> I am sure I won't be the 1st developer to throw up my hands and go to 
> Linux...

Boo-hoo! Disabling SIP is too hard for me, whaa whaa <pout>. I'm going
to go use Linux and hold my breath!

no one cares.

-- 
I'm completely in favor of the separation of Church and State. My
	idea is that these two institutions screw us up enough on their
	own, so both of them together is certain death.

[toc] | [prev] | [next] | [standalone]

#133387

On 2020-07-10, Neal Reid <neal@magma.ca> wrote:
> In article <hmh3l0Fero4U1@mid.individual.net>,
>  Jolly Roger <jollyroger@pobox.com> wrote:
>> On 2020-07-05, Neal Reid <neal@magma.ca> wrote:
>> > I have been stymied trying to run sudo gpt pr show /dev/disk0 on my
>> > Catalina machime. I have allowed full disk access to Terminal (and
>> > a few other things) but still get "Cannot open /dev/disk0:
>> > permission denied"
>> >
>> > All I want to do is LOOK. Why is that locked down, and how do I get
>> > around it?
>> 
>> I haven't ever used gpt. Is there some piece of information gpt gives
>> you that diskutil doesn't?
>
> Yes - full disk GUID and bits necessary for running Linux 

Nope. You can get that and a lot more from diskutil. You're probably
just using gpt because it's what you are used to more than any other
reason.

>> Anyway, to get around this, just temporarily disable SIP.  Be sure to
>> re-enable it after you are done.
>
> Not the point of the question

Yes it is.

> gpt is an example of something I used daily before Apple put a barbed
> wire fence around their walled garden This is MY machine. I did my
> first Mac development in 1984. I should be allowed to take
> responsibility for my own machine.

Bullshit. You are allowed to disable System Integrity Protection any
time you want. You can modify anything on your computer if you want.
You can knock your goofy ass out for all Apple (or anyone else) cares. 

> I am sure I won't be the 1st developer to throw up my hands and go to
> Linux...

LOL! Talk about prissy. Yeah, Macs definitely aren't for you.  Don't let
the door hit your ass on the way out.  Oh, and real devs will be
laughing *at* you - not *with* you.

-- 
A bad workman always blames his tools for his shortcomings.

JR

[toc] | [prev] | [standalone]

Back to top | Article view | comp.sys.mac.system

csiph-web