"Failed to gain authorization" about cargo-instruments HOT 5 CLOSED

You have to replace the ad-hoc signature of the binary to be profiled with a new one that has the com.apple.security.get-task-allow entitlement enabled. You can do it like this:

1. Create an ent.plist file with the following contents in your home dir:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
    <dict>
        <key>com.apple.security.get-task-allow</key>
        <true/>
    </dict>
</plist>

2. Build the binary.
3. Resign it with a new ad-hoc signature including the entitlement: codesign -s - -f --entitlements ~/ent.plist <path to binary>
4. Run the profiler with xcrun xctrace record --template 'Allocations' --launch -- <path to binary> [args...]

from cargo-instruments.

I'm still not running big sur anywhere, although I will be in a week or so.

from cargo-instruments.

@hkratz this sounds like something I should be able to do automatically as part of the tool?

from cargo-instruments.

@cmyr Yes. It would probably be best if you could do this by setting some magic linker options for rustc. The linker is the one doing the ad-hoc signing in the first place so I assume it can also include the entitlement somehow.

from cargo-instruments.

I think we could hack around this by doing an adhoc signature that's mentioned in this blog post

https://eclecticlight.co/2020/08/22/apple-silicon-macs-will-require-signed-code/

from cargo-instruments.