gasmask icon indicating copy to clipboard operation
gasmask copied to clipboard

Frequent System Passord Prompts when override external modifications enabled (8.3 on yosemite)

Open drdamour opened this issue 10 years ago • 10 comments

Ever since yosemite i get the system password prompt when override external modifications is enabled.

I get it when i wake from sleep, or come from a lock screen. I also get it when connecting or disconnecting junos pulse secure vpn client. this makes me think ti's every time i'm establishing a new network connection. I don't seem to get it when hopping wifi networks..but that may be cause my system pass is in the grace period.

Seems like something is tripping the external modification detector.

drdamour avatar Dec 29 '15 18:12 drdamour

It's due to the pulse secure vpn client. I use the same client. When it disconnects even briefly it restores /etc/hosts with a copy it makes when it connects. Thus it triggers the 'restore' with gas mask. It's annoying but that's how it works. You can always just disable the restoration feature in the gas mask preferences.

trevershick avatar Dec 29 '15 18:12 trevershick

could gas mask do a diff on the file to see if there's really a change before triggering external modification routine?

drdamour avatar Dec 29 '15 18:12 drdamour

I suppose that's possible. It being the holidays i'm not sure when i'll get to it. Although i'd like to see this feature myself.

trevershick avatar Dec 29 '15 18:12 trevershick

might related to #84 or #58

drdamour avatar Dec 29 '15 18:12 drdamour

Yeah. the system password prompt actually fixed a defect that was in 8.1. 8.1 wasn't properly restoring the hosts file becuase the permissions on hosts required root to modify the file. It's unfortunate, but it's the way it is. However, i think with your suggestion it may minimize the 'noise' for these users.

trevershick avatar Dec 29 '15 18:12 trevershick

I'm having a similar issue but for me it also freezes after I have entered the password & refuses to accept it.

A machine restart seems to be the only fix :/

robhuzzey avatar Jan 27 '16 16:01 robhuzzey

I too am using Pulse Secure. It'd be nice to be able to automatically accept a legitimate change. It seems to install and remove the VPN's ssl address IP address in a demarked block.

mrjcleaver avatar Apr 18 '16 14:04 mrjcleaver

Is there any way to know which application is modifying the hosts file causing gasmask to restore it?

MarsVard avatar Oct 18 '16 08:10 MarsVard

I'm having the same problem with macOS 10.12.x and parallels running

zupodaniel avatar Apr 15 '17 17:04 zupodaniel

Yes, I have this problem with Parallels as well. Annoying, but other than running it as root (sudo /Applications/Gas\ Mask.app/Contents/MacOS/Gas\ Mask) not sure what else to do.

kfattic avatar Sep 21 '17 13:09 kfattic