Re: OS X 10.8 Mountain Lion and GNAT GPL 2012

[Blady <p.p11@orange.fr>]

Le jeudi 20 septembre 2012 18:34:17 UTC+2, Simon Wright a écrit :
> I just updated to 10.7.5.
> The gdb from GNAT GPL 2012 seemed to work fine: it's
>  $ ls -l /opt/gnat-gpl-2012/bin/gdb
>  -rwxr-sr-x@ 1 simon  procmod  5479472 14 May 15:25 /opt/gnat-gpl-2012/bin/gdb
> /usr/bin/gdb, on the other hand, isn't setgid procmod and (the first
> time I ran it) put up a dialog box asking for my password.
> I have /System/Library/LaunchDaemons/com.apple.taskgated.plist set up to
> run taskgated with -p -s.

Yes Simon, in fact with ML, taskgated isn't launched with option -p (manual said: old (Tiger) convention that a process with a primary effective group of procmod or procview is allowed to get task ports. Without this option, this legacy mode is not supported.)
As you said for Lion, and in my case with SL, taksgated was launched with option -p.
Thus with ML even gdb has setgid procmod group, it is blocked by taskgated.

Fortunately the -s option of taksgated (active with both SL and ML) let us codesign gdb to proceed.
Well, GNAT gdb is already signed:
Authority=gnat_debugger
Signed Time=14 mai 2012 16:25:55
It seems that taksgated need a local system signature thus we have to follow instructions on http://sourceware.org/gdb/wiki/BuildingOnDarwin.
And we must force it with -f option:
$ codesign -fs gnat_gdb gdb
gdb: replacing existing signature
It is now ok.

Don't forgot to add option '-largs -Wl,-no_pie' if you want to get good line numbers.

HTH, Pascal.