Thanks Quinn. Figured it out the hard way - signed the binary, and it
stopped popping up the firewall alert.

Yes my code is listening to incoming connections, however I do not own that
code - I just embedded a web server into my app, thus i am not the one who
binds/listens to a socket and accepts connections - so i cannot delegate
this to launchd.

>This means that the system can't determine that build X+1 of your app is
the same as build X.

I would assume that once the app has been allowed with the firewall, the
system could calculate the binary's hash/checksum, so the next time the
firewall wants to pop up an alert, it would recalculate the checksum and
compare the result with what it has in its database already, check whether
the checksum (and therefore the binary) has changed since or not, and based
on that pop up an alert or just allow/block the connection.

Anyways, thanks for the answer, the problem is solved.

2015-09-14 1:29 GMT-07:00 Quinn "The Eskimo!" <eski...@apple.com>:

>
> On 13 Sep 2015, at 16:56, Nick <eveningn...@gmail.com> wrote:
>
> > Does the process started using launchd (its plist is located at
> ~/Library/LaunchAgents/), that opens ports for listening, require explicit
> adding to the firewall exceptions?
>
> Two things:
>
> * The most common cause of system components, like the firewall,
> 'forgetting' about your program is that your program is not code signed.
> This means that the system can't determine that build X+1 of your app is
> the same as build X.  Make sure your code signed, in this case with
> Developer ID.
>
> * Is your code listening for incoming connections?  Or do you have the
> socket listed in your launchd property list?  The latter is highly
> preferred.
>
> Share and Enjoy
> --
> Quinn "The Eskimo!"                    <http://www.apple.com/developer/>
> Apple Developer Relations, Developer Technical Support, Core OS/Hardware
>
>
>
>  _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Macnetworkprog mailing list      (Macnetworkprog@lists.apple.com)
> Help/Unsubscribe/Update your Subscription:
>
> https://lists.apple.com/mailman/options/macnetworkprog/eveningnick%40gmail.com
>
> This email sent to eveningn...@gmail.com
 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list      (Macnetworkprog@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/macnetworkprog/archive%40mail-archive.com

This email sent to arch...@mail-archive.com

Reply via email to