This gist describes the steps that are required to setup and debug Apple's Endpoint Security Sample on a Virtual Machine (VM) with LLDB.
Using a VM for development of Security Extensions is recommended because certain macOS security measures will either need to be turned off or relaxed. All of these measures are vital for macOS security and should never be altered on a normal installation of macOS.
The following security systems will be modified:
- System Integrity Protection (SIP)
- Apple Mobile File Integrity (AMFI)