Hardening Runtime at Mac Mojave - Initialization Error 1

VMProtect
1

Hi,
In newcoming Mac OS 10.15 (Catalina) Apple ads a new headache for developers: notarization.
Notarization requires signing by development certificate and using hardening runtime (-o runtime +all other opts passed to signcode).

When testing VMProtect-ed soft signed with hardening runtime at Mac OS 10.14.5 (Mojave), we are getting:

  1. without packing option in project - getting “Initialization Error 1” (it doesn’t happen without hardening runtime or at 10.13)
  2. with packing option in project - crash report from Apple on failure to find the signature.

Could it be we are missing something or people have some work-arounds?
Thanks,
Robert

2

It seems OSX disallows to change attributes for signed memory regions, so VMProtect shows this error.

3

Thank you for your reply.

We do need a fix or a work-around.

If/When you find a work-around or any other fix, please let me know to test it.

Thanks in advance!

Robert

4

Just don’t use the hardening runtime.

5

Unfortunately, this is not an option for upcoming in September/October
Mac 10.15 Catalina.

Starting from Catalina, Apple requires “notarization” for all 3-rd party software to run.
Signing with hardening runtime is a pre-condition for notarization.
I’ve tried without hardening runtime, and notarization not passes.

If a duly signed by a certificate 3-rd party software at 10.15 not notarized, user gets message
about its danger and suggestion to contact the developer.

I hope the status is clear now.

Thanks,
Robert

6

Let’s try another path.

VMProtect Pro.app for Mac will face the same issue starting this October.

To distribute it at Mac OS 10.15 and up, the “normal” options are:

  • get it into Mac App Store;
  • distribute it by yourself after notarization - here you will need “hardening runtime” being a pre-condition for notarization.

Hope, it makes the point crystal clear.

Thanks.
BRGS,
Robert

7

Hi people,
Those who do not want to submit app to Apple’s Mac Store and need soon
to notarize their Mac software and sign with hardening runtime,
can get a temporary relieve and use:

a) protected and packed by VMProtect app;
b) next sign it with hardening runtime while adding entitlements from:

Use “Hardened Runtime” entitlements to prevent crash.

Hope it will work for some time till enough till many folks will cry and ask for something better.

Take care,
Kind regards,
Robert

8

Thank you for information.