Rules fail to delete in v. 2.0x

[flipphillips]

Brief Description: Can't delete some rules.

Steps to Reproduce: I upgraded one of my machines to 2.0.3 last night.

I went through the rule list to delete some excess stuff and discovered that there.

Some rules deleted cleanly, others whose item: (null) cannot be deleted.

Regression: Updated 2nd machine. Same result.

Resolution: Deleted rules .plist and started over from scratch. A bit brutal, but it works.

[luckman212]

Also related: #19

[objective-see]

Hrmm, sorry about this!

1. Was this an upgrade from a pre-1.0 v?
2. Can you attach (if you still have it), a/the rules.plist file that had the problematic rules?
3. If you run log stream --predicate="process contains[c] 'BlockBlock'" anything relevant show up?

Mahalo!

[flipphillips]

On Apr 18, 2021, at 4:25 AM, Objective-See @.@.>> wrote:

Hrmm, sorry about this!

1. Was this an upgrade from a pre-1.0 v?

It was v1 but there -was- a pre v1 on this machine.

1. Can you attach (if you still have it), a/the rules.plist file that had the problematic rules?

I may have it on another machine. My current box doesn’t have anything.

Mahalo!

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/objective-see/BlockBlock/issues/27#issuecomment-821954137, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AAFD3TZTU7NLILYB7LNOFFLTJKJN3ANCNFSM4276QLPA.

-fp

-- professor / motion picture science + imaging science / rit flipphillips.comhttp://flipphillips.com sanitize after reading

[evilsocket]

i'm experiencing this as well, on 2.0.3 (latest), macOS 11.3, the last log lines seem relevant:

2021-04-30 14:08:42.903985+0200 0x15661    Activity    0x234ad              550    0    BlockBlock Helper: (RunningBoardServices) didChangeInheritances
2021-04-30 14:08:42.905887+0200 0x15661    Activity    0x234ae              550    0    BlockBlock Helper: (RunningBoardServices) didChangeInheritances
2021-04-30 14:08:42.907957+0200 0x15661    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) Task <795AB5B6-4C31-4227-A928-EAD912D2EFCC>.<16> resuming, timeouts(15.0, 604800.0) QOS(0x19) Voucher (null)
2021-04-30 14:08:42.909402+0200 0x15661    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) [Telemetry]: Activity <nw_activity 12:2 [7E65CBAA-CA78-47EE-936A-424AB778FBB1] (reporting strategy default)> on Task <795AB5B6-4C31-4227-A928-EAD912D2EFCC>.<16> was not selected for reporting
2021-04-30 14:08:42.909813+0200 0x15661    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) [com.apple.CFNetwork:ATS] Task <795AB5B6-4C31-4227-A928-EAD912D2EFCC>.<16> {strength 1, tls 8, ct 0, sub 0, sig 0, ciphers 1, bundle 0, builtin 0}
2021-04-30 14:08:42.910002+0200 0x15661    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) Task <795AB5B6-4C31-4227-A928-EAD912D2EFCC>.<16> now using Connection 8
2021-04-30 14:08:42.910284+0200 0x15661    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) Task <795AB5B6-4C31-4227-A928-EAD912D2EFCC>.<16> sent request, body S 289
2021-04-30 14:08:42.940582+0200 0x15664    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) Task <795AB5B6-4C31-4227-A928-EAD912D2EFCC>.<16> received response, status 200 content K
2021-04-30 14:08:42.940671+0200 0x15664    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) Task <795AB5B6-4C31-4227-A928-EAD912D2EFCC>.<16> done using Connection 8
2021-04-30 14:08:42.940773+0200 0x15664    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) Task <795AB5B6-4C31-4227-A928-EAD912D2EFCC>.<16> response ended
2021-04-30 14:08:42.940853+0200 0x155d5    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) [com.apple.CFNetwork:Summary] Task <795AB5B6-4C31-4227-A928-EAD912D2EFCC>.<16> summary for task success {transaction_duration_ms=31, response_status=200, connection=8, reused=1, request_start_ms=0, request_duration_ms=0, response_start_ms=30, response_duration_ms=0, request_bytes=434, response_bytes=102, cache_hit=0}
2021-04-30 14:08:42.941544+0200 0x15664    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) Task <795AB5B6-4C31-4227-A928-EAD912D2EFCC>.<16> finished successfully
2021-04-30 14:08:42.942221+0200 0x15662    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) Task <79745D5B-88D2-4220-BA2D-712EE5763FFF>.<17> resuming, timeouts(15.0, 604800.0) QOS(0x19) Voucher (null)
2021-04-30 14:08:42.942275+0200 0x15662    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) [Telemetry]: Activity <nw_activity 12:2 [BE536546-2592-4E0B-B858-51162805CD88] (reporting strategy default)> on Task <79745D5B-88D2-4220-BA2D-712EE5763FFF>.<17> was not selected for reporting
2021-04-30 14:08:42.942546+0200 0x15664    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) [com.apple.CFNetwork:ATS] Task <79745D5B-88D2-4220-BA2D-712EE5763FFF>.<17> {strength 1, tls 8, ct 0, sub 0, sig 0, ciphers 1, bundle 0, builtin 0}
2021-04-30 14:08:42.942663+0200 0x15664    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) Task <79745D5B-88D2-4220-BA2D-712EE5763FFF>.<17> now using Connection 8
2021-04-30 14:08:42.942826+0200 0x15664    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) Task <79745D5B-88D2-4220-BA2D-712EE5763FFF>.<17> sent request, body S 275
2021-04-30 14:08:42.972381+0200 0x15661    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) Task <79745D5B-88D2-4220-BA2D-712EE5763FFF>.<17> received response, status 200 content K
2021-04-30 14:08:42.972470+0200 0x15661    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) Task <79745D5B-88D2-4220-BA2D-712EE5763FFF>.<17> done using Connection 8
2021-04-30 14:08:42.972571+0200 0x15661    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) Task <79745D5B-88D2-4220-BA2D-712EE5763FFF>.<17> response ended
2021-04-30 14:08:42.972662+0200 0x15664    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) [com.apple.CFNetwork:Summary] Task <79745D5B-88D2-4220-BA2D-712EE5763FFF>.<17> summary for task success {transaction_duration_ms=30, response_status=200, connection=8, reused=1, request_start_ms=0, request_duration_ms=0, response_start_ms=29, response_duration_ms=0, request_bytes=327, response_bytes=64, cache_hit=0}
2021-04-30 14:08:42.972795+0200 0x15662    Default     0x0                  550    0    BlockBlock Helper: (CFNetwork) Task <79745D5B-88D2-4220-BA2D-712EE5763FFF>.<17> finished successfully
2021-04-30 14:08:45.859015+0200 0x1484     Activity    0x234af              550    0    BlockBlock Helper: (AppKit) trackMouse send action on mouseUp
2021-04-30 14:08:45.859070+0200 0x1484     Activity    0x238a0              550    0    BlockBlock Helper: (AppKit) sendActionFrom:
2021-04-30 14:08:45.859117+0200 0x1484     Activity    0x238a1              550    0    BlockBlock Helper: (AppKit) sendAction:
2021-04-30 14:08:47.266152+0200 0x1484     Activity    0x238a2              550    0    BlockBlock Helper: (AppKit) trackMouse send action on mouseUp
2021-04-30 14:08:47.266240+0200 0x1484     Activity    0x238a3              550    0    BlockBlock Helper: (AppKit) sendActionFrom:
2021-04-30 14:08:47.266322+0200 0x1484     Activity    0x238a4              550    0    BlockBlock Helper: (AppKit) sendAction:
2021-04-30 14:08:47.267719+0200 0x158f5    Default     0x238a4              112    0    BlockBlock: BlockBlock.app(112) ERROR: failed to find rule
2021-04-30 14:08:47.268159+0200 0x158f5    Default     0x238a4              112    0    BlockBlock: BlockBlock.app(112) ERROR: failed to delete rule, RULE: process path: /System/Library/PrivateFrameworks/PackageKit.framework/Versions/A/Resources/installd, item file: /Library/InstallerSandboxes/.PKInstallSandboxManager/F2A159F3-EEAC-40B1-A500-68B60DDEA263.activeSandbox/Root/Applications/Xcode.app/Contents/Developer/Platforms/AppleTVOS.platform/Library/Developer/CoreSimulator/Profiles/Runtimes/tvOS.simruntime/Contents/Resources/RuntimeRoot/System/Library/Extensions/AppleGameControllerPersonality.kext, item object: (null), action: 0x1, scope: 0
2021-04-30 14:08:53.824625+0200 0x1484     Activity    0x238a5              550    0    BlockBlock Helper: (AppKit) trackMouse send action on mouseUp
2021-04-30 14:08:53.824687+0200 0x1484     Activity    0x238a6              550    0    BlockBlock Helper: (AppKit) sendActionFrom:
2021-04-30 14:08:53.824742+0200 0x1484     Activity    0x238a7              550    0    BlockBlock Helper: (AppKit) sendAction:
2021-04-30 14:08:53.825260+0200 0x158f5    Default     0x238a7              112    0    BlockBlock: BlockBlock.app(112) ERROR: failed to find rule
2021-04-30 14:08:53.825462+0200 0x158f5    Default     0x238a7              112    0    BlockBlock: BlockBlock.app(112) ERROR: failed to delete rule, RULE: process path: /System/Library/PrivateFrameworks/PackageKit.framework/Versions/A/Resources/installd, item file: /Library/InstallerSandboxes/.PKInstallSandboxManager/F2A159F3-EEAC-40B1-A500-68B60DDEA263.activeSandbox/Root/Applications/Xcode.app/Contents/Developer/Platforms/AppleTVOS.platform/Library/Developer/CoreSimulator/Profiles/Runtimes/tvOS.simruntime/Contents/Resources/RuntimeRoot/System/Library/Extensions/AppleGameControllerPersonality.kext, item object: (null), action: 0x1, scope: 0

[eloudsa]

I have also the same issue with 2.0.3.

A rule cannot be deleted.

I have this log:

2021-05-12 18:17:49.096548+0200 0x1851     Activity    0x11d16              805    0    BlockBlock Helper: (AppKit) sendActionFrom:
2021-05-12 18:17:49.096578+0200 0x1851     Activity    0x11d17              805    0    BlockBlock Helper: (AppKit) sendAction:
2021-05-12 18:17:49.096921+0200 0x5a85     Default     0x11d17              312    0    BlockBlock: BlockBlock.app(312) ERROR: failed to find rule
2021-05-12 18:17:49.096980+0200 0x5a85     Default     0x11d17              312    0    BlockBlock: BlockBlock.app(312) ERROR: failed to delete rule, RULE: process path: /bin/bash, item file: /Library/LaunchAgents/com.paloaltonetworks.gp.pangps.plist, item object: (null), action: 0x1, scope: 0

[objective-see]

Thanks! Should be fixed in v2.0.4 :)

[flipphillips]

This has transmogrified itself into something new in Ventura / bb 2.1.5 where, now, there are no rules listed when I go to the Helper app . The extension looks to add things via dialog. But they don't show up in the window. Uninstall / reinstall doesn't seem to work either.