get_task_allow 🤔

Have you ever observed this weird entitlement while you were uploading app to store…

… but you didn’t bother to understand it as you were in a hurry to finish your task and start your Friday night 🍻🥂

I know this happens with us developers.

But it’s quite a simple and an important flag with in your app.

When get_task_allow is set as true, your app could be debugged where as when it’s false, your app can’t be debugged. In other words, to prevent alteration to you app’s behaviour, get_task_allow should be turned off.

Because of this reason, distribution profile require get_task_allow to be false.

Quick trick

Fire following command for your app’s simulator binary and check the entitlement through command line

codesign --display --entitlements - xxx.app
Executable=/Users/monica/Library/Developer/Xcode/DerivedData/XXX-fvyquzwxtgvwbmdsuvepucjcfuzn/Build/Products/Debug-iphonesimulator/XXX.app/XXX
??qq?<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>com.apple.security.get-task-allow</key>
	<true/>
</dict>
</plist>

————————————————– END ————————————————–

Leave a Reply

Your email address will not be published. Required fields are marked *