testing application permissions for non-open-source application

[cspence002]

I'm trying to test application permissions for a webkit browser I've installed. When running

spctl --list --type execute

I get a long list of executables none of which include the applications name.

I'm trying to determine how to interpret this exactly. What would be a normal expected output of this command?

 

[cspence002]

I've ran this to ensure of appropriate permissions of applications :

sudo find /Applications -iname '*\.app' -type d -perm -2 -ls | wc -l | xargs

with a return of 0

sudo ls -lO /Applications

returns

Checking extended attributes:

 

[bogdanw]

Apple Developer Documentation
Entitlements https://developer.apple.com/documentation/bundleresources/entitlements
Diagnosing Issues with Entitlements https://developer.apple.com/documen...itlements/diagnosing_issues_with_entitlements
"Once you’ve build your app, inspect the entitlements built into your app by running the following command in the Terminal:
codesign --display --entitlements :- YourApp.app
This command prints a plist that contains all of the entitlements built into the app."

 

[cspence002]

Apple Developer Documentation
Entitlements https://developer.apple.com/documentation/bundleresources/entitlements
Diagnosing Issues with Entitlements https://developer.apple.com/documen...itlements/diagnosing_issues_with_entitlements
"Once you’ve build your app, inspect the entitlements built into your app by running the following command in the Terminal:
codesign --display --entitlements :- YourApp.app
This command prints a plist that contains all of the entitlements built into the app."

Thanks I usually display the parsed format with with this command for better readability:

codesign -d --entitlements - YourApp.app

Do you know anything about parsing the executables and/or identifying their source? Such as those shown in the output of this command ?

spctl --list --type execute

This isn't an application I've developed but one I've installed from a 3rd-party source.

 

[bogdanw]

I sincerely don’t understand what you are trying to find out.

spctl --list is not even an option mentioned in the manual

man -t spctl | open -fa "Preview"

 

[cspence002]

I sincerely don’t understand what you are trying to find out.

spctl --list is not even an option mentioned in the manual

man -t spctl | open -fa "Preview"

Pretty much what this gke stuff is. (google kubernetes engine?) and if this webkit application is responsible. I can go into details as to why but it then becomes another post.