On Fri, Jul 26, 2019 at 5:44 AM Jan Pospíšil <[email protected]> wrote:

> First of all I would like to thank all for your effort to help me, I
> really appreciate it.
>
> On 25 Jul 2019, at 19:49, Daria Phoebe Brashear <[email protected]> wrote:
> >
> > Can you do the following and give me output?
> >
> > rxdebug localhost 7001 -version
>
> I am afraid I do not have rxdebug, it is not part of the auristor client,
> is it? Where can I get the macOS version of these utils?
>
>
(It's not going to matter)

> Also, I would go to "System Preferences > Security and Privacy" to check
> > if we have to "allow" the kernel extension.
>
> I remember I clicked on allow during the installation. It seems that the
> problem is really in the “signature”:
>
> # kextutil /Library/Extensions/yfs.kext
> Untrusted kexts are not allowed
> [...]
> Kext rejected due to system policy: <OSKext 0x7fe37b9cfa50
> [0x7fffa90b9b40]> { URL =
> "file:///Library/StagedExtensions/Library/Extensions/yfs.kext/", ID =
> "com.auristor.filesystems.yfs" }
> Diagnostics for /Library/Extensions/yfs.kext:
>
>
> # sqlite3 /var/db/SystemPolicyConfiguration/KextPolicy
> sqlite> SELECT * FROM kext_policy WHERE bundle_id LIKE '%yfs' ;
> L2TGP62ZXS|com.your-file-system.filesystems.yfs|1|AuriStor, Inc.|12
> L2TGP62ZXS|com.auristor.filesystems.yfs|0|AuriStor, Inc.|4
>
> Why there are two policies and why the latter is disabled? On the other
> computer the extension is enabled and everything works fine, so I don't
> understand, why even re-installing the client did not help here.
>
>
There are two policies because the older
(com.your-file-system.filesystems.yfs) policy applies to a module which was
earlier installed on this system. It's the same team (L2TGP62ZXS) so this
actually wasn't supposed to happen, especially given the build is
notarized(!)

Does anything interesting appear at System Preferences > Security and
Privacy > General after
sudo kextload /Library/Extensions/yfs.kext
?

It may be that I need to lay hands on a pre-10.13.6 system, install a
com.your-file-system.filesystems.yfs-era build, and then update both the
system and the kext to reproduce this.

-- 
Daria Phoebe Brashear
AuriStor, Inc
dariaphoebe.com

Reply via email to