From: Jack H. <jwh...@us...> - 2014-11-22 00:54:22
|
Update of /cvsroot/fink/dists/10.7/stable/main/finkinfo/devel In directory sfp-cvs-1.v30.ch3.sourceforge.com:/tmp/cvs-serv27790 Modified Files: apple-gdb.info Log Message: document codesigning gdb Index: apple-gdb.info =================================================================== RCS file: /cvsroot/fink/dists/10.7/stable/main/finkinfo/devel/apple-gdb.info,v retrieving revision 1.11 retrieving revision 1.12 diff -u -d -r1.11 -r1.12 --- apple-gdb.info 22 Oct 2014 04:20:18 -0000 1.11 +++ apple-gdb.info 22 Nov 2014 00:54:18 -0000 1.12 @@ -88,6 +88,48 @@ DescPackaging: << Set UseMaxBuildJobs false as xm.h can be created out of order. << +DescUsage: << +To execute gdb without using sudo, the binary needs to be codesigned +on each machine that it is installed on. This requires the creation +of a certificate and signing of the gdb binary with the following +steps. + +1) Open the application 'Keychain Access' from the Utilities folder. +2) In the Keychain Access application, select the 'Create a + Certificate...' submenu item from the 'Keychain Access' menu and + the 'Certificate Assistant' submenu. +3) In the 'Certificate Assistant' panel, enter 'gdb-cert' for the name + of the certificate and leave the Identity Type as 'Self Signed Root'. + Set the Certificate Type to 'Code Signing' and enable the 'Let me + override defaults' checkbox. Click the 'Continue' button. You may + wish to lengthen the default 365 day lifespan of the certificate + to 3650 days. +4) Continue clicking the 'Continue' buttons that appear until you see + the panel to 'Specify a Location For The Certificate'. Set the + Keychain to 'System' at this point. If you can't store the + certificate in the 'System' keychain, create it in the 'login' + keychain, then export it. You can then import it into the 'System' + keychain. +5) Select the 'System' entry in the Keychains listing of the Keychain + Access window. Select your newly created 'gdb-cert' certificate and + select the 'Get Info' contextual menu item, expand the 'Trust' + item and set 'Code Signing' to '"Always Trust'. +6) Quit the 'Keychain Access' application. +7) On darwin12 or later, you must edit the line in the file + /System/Library/LaunchDaemons/com.apple.taskgated.plist from + + <string>-s</string> + + to + + <string>-sp</string> + + adding the '-p' option. Due to kernel caching, a restart is needed + for the changes to take effect. +8) After the restart, the actual codesigning should be done with the + command 'codesign -s gdb-cert %p/bin/gdb'. Note it can take over + five minutes for the codesigning to complete. +<< DescPort: << This packaging provides the deprecated Apple gdb for use with Xcode 4.7 or later. It both BuildDepends and Depends on xcode (>= 4.7) to prevent displacing the system gdb. |