First, I'm not sure how they are parsing . I see -sp, but the help is showing -ps. Here is a link for this ---https://www.manpagez.com/man/8/taskgated/
You know that taskgated is a daemon launched by launchctl service - which more like crond. Now comes the - task_for_pid () functionality. >From 10.14 Apple did restrict accesses to XPC ports, which is the core IPC on darwin. Basically any program tries to access task_for_pid() will fail from that version onward, but in this case SIP is disabled the booting from a different image ( internally). ___ So I think Apple made a mistake while they were pushing out the beta. It's not unusual. I've seen many times. Catalina ( 10.15.N) will have more restrictions, 10.16 will have different 3rd party supports ( kext, kernel pseudo drivers will not be loaded, unless they allow, based on specific notarization - yet to be seen ). So if your machines are being used ( or a part of some infrastructure ) by many people, backup/downtime/migration/etc seems to be logical path. ~pro On Fri, May 29, 2020 at 5:44 AM Greg Earle <ea...@isolar.dyndns.org> wrote: > > On 29 May 2020, at 4:47, Franco Vaccari wrote: > > > I would try other options before reinstalling the system, who knows, > > reinstalling the developer tools, restarting with shift to clean > > caches, reinstalling the security update, but ok, maybe reinstalling > > everything from backup may be the easiest… > > > > Let us know how it went… > > Just to summarize the (apparent) solution for the list: > > It looks like Security Update 2020-003 changed the "taskgated" plist > file > > /System/Library/LaunchDaemons/com.apple.taskgated.plist > > It added a single line with a new "-sp" switch: > > -- > whdmac:~ root# diff -rC 3 > /System/Library/LaunchDaemons/*com.apple.taskgated.plist* > *** > /System/Library/LaunchDaemons/DO_NOT_USE_com.apple.taskgated.plist_BAD > 2020-04-16 > 21:28:38.000000000 -0700 > --- /System/Library/LaunchDaemons/com.apple.taskgated.plist 2019-04-14 > 18:58:56.000000000 -0700 > *************** > *** 19,25 **** > <key>ProgramArguments</key> > <array> > <string>/usr/libexec/taskgated</string> > - <string>-sp</string> > </array> > </dict> > </plist> > --- 19,24 ---- > -- > > The trouble is, "taskgated" does not seem to support "-sp": > > -- > whdmac:/ root# /usr/libexec/taskgated -sp > taskgated: invalid option -- s > Usage: taskgated [-ps] [-t seconds] [-i pid] > -- > > So, I don't understand why Apple added this switch. > > I also don't understand why everyone who installed this Security Update > has not also been affected by this?!? > > Anyway, I removed the "-sp" line, rebooted, and now everything works > again - "taskgated" is running and isn't exiting anymore, my Postgres > server is running happily, and my MacPorts binaries are running without > wedging. > > Apologies for the slightly off-topic thread ... > > - Greg
