objective-see / lulu Goto Github PK

The non-commercial clause you use in the license file means the project is not truly "open source" (see point 6 here). Would you consider relicensing it under a truly open source license, like GPL, MIT or CC0? Thanks!

cannot disable lulu and close lulu...
latest macos

The top comment on the LuLu Hacker News post suggested this and would increase the ease of use for many people. Instead of looking up certain IPs, we could trust lists of IPs curated by people/communities we deem trustworthy.

https://news.ycombinator.com/item?id=16188502

I am so excited about Lulu!

Maybe you have noticed this already, but it is possible to have more than one instance of Lulu open at a time. I achieved this by installing Lulu from the command line and then opening the app in Launchpad. Ideally Lulu could detect if more than one instance is running concurrently and kill the extra instance.

After killing all Lulu processes in Activity Monitor, I could not reproduce the issue.

It seems there is often a huge delay between a process trying to connect to the internet and the LuLu alert popping up? Seems to be anything from minutes to an hour or so. Can make it look like apps failing - especially things like adobe CC or Dropbox etc.

I've added a rule to allow Tunnelblick app to exit, but it's apparently not applied.

Tunnelblick launches the openvpn process this way when starting a VPN:

/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.17-openssl-1.0.2k/openvpn --daemon --log /Library/Application Support/Tunnelblick/Logs/-SUsers-Smaxxer-SLibrary-SApplication Support-STunnelblick-SConfigurations-Syopf--android.tblk-SContents-SResources-Sconfig.ovpn.769_0_1_0_1065264.1337.openvpn.log --cd /Library/Application Support/Tunnelblick/Users/maxxer/yopf-android.tblk/Contents/Resources --verb 3 --config /Library/Application Support/Tunnelblick/Users/maxxer/yopf-android.tblk/Contents/Resources/config.ovpn --verb 3 --cd /Library/Application Support/Tunnelblick/Users/maxxer/yopf-android.tblk/Contents/Resources --management 127.0.0.1 1337 --management-query-passwords --management-hold --script-security 2 --up /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw --down /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

But I couldn't find a way to allow the openvpn process

When my processes tried to connect to 127.0.0.1 (a local proxy) instead of the internet, the Lulu alert window poped up again and again no matter what button I pressed. The only way to stop this endless loop was to force quit the Lulu deamon and the lulu helper process.
This does only happen sometimes though...

since version 0.9.4 does some advanced rule settings, I was not able to import my old lulu-rules.plist

the window which handles new rules does not allow a "cmd+v" shortcut, so each time I was copying a process path from the lulu-rules.plist, I had to right-click to "paste" the rule..

Would be greatly improved workflow if the shortcut would be allowed.

All the best

For those of us who are developers but are not familiar with XCode or Objective-C, it is not obvious at all how to compile LuLu. I have tried and failed!

Could you provide some instructions please?

/usr/bin/curl is Apple-signed, and so allowed by default. Fine if I'm in Terminal and calling curl manually. But if some malicious program shells out to curl to push data to a rogue server, I might want to know about that. I request that if a command line tool is using the network, maybe LuLu could expose a notification combining curl with parent GUI process as a pair and let me choose to block or allow that.

When LuLu enabled i fails to connect on a local SMB connection , disabling while connecting helps !

Bug or feature ?

MacBook-Pro:LuLu_0 pai$ sudo configure.sh -install
Password:
sudo: configure.sh: command not found
MacBook-Pro:LuLu_0 pai$ sudo configure.sh -install
sudo: configure.sh: command not found
MacBook-Pro:LuLu_0 pai$ sudo configure.sh -install
sudo: configure.sh: command not found
MacBook-Pro:LuLu_0 pai$ sudo configure.sh -install
sudo: configure.sh: command not found
MacBook-Pro:LuLu_0 pai$ sudo configure.sh -install
sudo: configure.sh: command not found
MacBook-Pro:LuLu_0 pai$

I experienced a huge CPU load after restarting the system and starting several apps.

The load got normal after few minutes. Since this is an alpha version it may be helpful for you. Otherwise just close it :)

Thank you for this great app!

Took me ages to realise this was due to LuLu!

After restarting my macbook I could ping from terminal but couldn't browse from any browser, or even run curl. Ping would work fine.

This would usually last 5-10 minutes, after which it would start working again without taking any action.

I ran the uninstall but I found the LuLu helper application was still present on my computer

bug.mp4.zip

###Update02: tried fresh install - no change to report, which makes LuLu not useable anymore for me - sad day..

###Update01: LuLu 0.9.3 doesn't seem to be affected, though still unable to connect to WLAN #48 ..

Helper process (LuLu 0.9.2) is bringing all windows out of focus every 5-7 seconds on MacOS Sierra 10.12.6 after security update 2018-002

Process sampled - hope it helps..
`Sampling process 335 for 3 seconds with 1 millisecond of run time between samples
Sampling completed, processing symbols...
Analysis of sampling LuLu Helper (pid 335) every 1 millisecond
Process: LuLu Helper [335]
Path: /Applications/LuLu.app/Contents/Library/LoginItems/LuLu Helper.app/Contents/MacOS/LuLu Helper
Load Address: 0x10246e000
Identifier: com.objective-see.luluHelper
Version: 0.9.1 (0.9.1)
Code Type: X86-64
Parent Process: ??? [1]

Date/Time: 2018-04-01 09:29:06.681 +0200
Launch Time: 2018-04-01 09:17:31.660 +0200
OS Version: Mac OS X 10.12.6 (16G1314)
Report Version: 7
Analysis Tool: /usr/bin/sample

Call graph:
2559 Thread_3062 DispatchQueue_1: com.apple.main-thread (serial)
+ 2559 start (in libdyld.dylib) + 1 [0x7fffa2ed1235]
+ 2559 NSApplicationMain (in AppKit) + 1237 [0x7fff8b1fce0e]
+ 2559 -[NSApplication run] (in AppKit) + 926 [0x7fff8b2323db]
+ 2559 -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] (in AppKit) + 2796 [0x7fff8b9b97ee]
+ 2559 _DPSNextEvent (in AppKit) + 1120 [0x7fff8b23da54]
+ 2559 _BlockUntilNextEventMatchingListInModeWithFilter (in HIToolbox) + 71 [0x7fff8cca6b26]
+ 2559 ReceiveNextEventCommon (in HIToolbox) + 432 [0x7fff8cca6cf1]
+ 2559 RunCurrentEventLoopInMode (in HIToolbox) + 240 [0x7fff8cca6ebc]
+ 2559 CFRunLoopRunSpecific (in CoreFoundation) + 420 [0x7fff8d746114]
+ 2559 __CFRunLoopRun (in CoreFoundation) + 1361 [0x7fff8d7468c1]
+ 2559 __CFRunLoopServiceMachPort (in CoreFoundation) + 212 [0x7fff8d747434]
+ 2559 mach_msg (in libsystem_kernel.dylib) + 55 [0x7fffa2ff7797]
+ 2559 mach_msg_trap (in libsystem_kernel.dylib) + 10 [0x7fffa2ff834a]
2559 Thread_3279
+ 2559 thread_start (in libsystem_pthread.dylib) + 13 [0x7fffa30ea08d]
+ 2559 _pthread_start (in libsystem_pthread.dylib) + 286 [0x7fffa30ea887]
+ 2559 _pthread_body (in libsystem_pthread.dylib) + 180 [0x7fffa30ea93b]
+ 2559 NSThread__start (in Foundation) + 1243 [0x7fff8f1698ad]
+ 2559 -[AlertMonitor monitor] (in LuLu Helper) + 352 [0x102475c62]
+ 2559 _dispatch_semaphore_wait_slow (in libdispatch.dylib) + 103 [0x7fffa2ea4891]
+ 2559 _os_semaphore_wait (in libdispatch.dylib) + 16 [0x7fffa2eb3a77]
+ 2559 semaphore_wait_trap (in libsystem_kernel.dylib) + 10 [0x7fffa2ff8386]
2559 Thread_3314: com.apple.NSEventThread
+ 2559 thread_start (in libsystem_pthread.dylib) + 13 [0x7fffa30ea08d]
+ 2559 _pthread_start (in libsystem_pthread.dylib) + 286 [0x7fffa30ea887]
+ 2559 _pthread_body (in libsystem_pthread.dylib) + 180 [0x7fffa30ea93b]
+ 2559 _NSEventThread (in AppKit) + 205 [0x7fff8b38af02]
+ 2559 CFRunLoopRunSpecific (in CoreFoundation) + 420 [0x7fff8d746114]
+ 2559 __CFRunLoopRun (in CoreFoundation) + 1361 [0x7fff8d7468c1]
+ 2559 __CFRunLoopServiceMachPort (in CoreFoundation) + 212 [0x7fff8d747434]
+ 2559 mach_msg (in libsystem_kernel.dylib) + 55 [0x7fffa2ff7797]
+ 2559 mach_msg_trap (in libsystem_kernel.dylib) + 10 [0x7fffa2ff834a]
2559 Thread_4452: com.apple.NSURLConnectionLoader
+ 2559 thread_start (in libsystem_pthread.dylib) + 13 [0x7fffa30ea08d]
+ 2559 _pthread_start (in libsystem_pthread.dylib) + 286 [0x7fffa30ea887]
+ 2559 _pthread_body (in libsystem_pthread.dylib) + 180 [0x7fffa30ea93b]
+ 2559 NSThread__start (in Foundation) + 1243 [0x7fff8f1698ad]
+ 2559 +[NSURLConnection(Loader) _resourceLoadLoop:] (in CFNetwork) + 313 [0x7fff8c882214]
+ 2559 CFRunLoopRunSpecific (in CoreFoundation) + 420 [0x7fff8d746114]
+ 2559 __CFRunLoopRun (in CoreFoundation) + 1361 [0x7fff8d7468c1]
+ 2559 __CFRunLoopServiceMachPort (in CoreFoundation) + 212 [0x7fff8d747434]
+ 2559 mach_msg (in libsystem_kernel.dylib) + 55 [0x7fffa2ff7797]
+ 2559 mach_msg_trap (in libsystem_kernel.dylib) + 10 [0x7fffa2ff834a]
2559 Thread_14110
+ 2559 start_wqthread (in libsystem_pthread.dylib) + 13 [0x7fffa30ea07d]
+ 2559 _pthread_wqthread (in libsystem_pthread.dylib) + 1426 [0x7fffa30ea621]
+ 2559 __workq_kernreturn (in libsystem_kernel.dylib) + 10 [0x7fffa300044e]
2559 Thread_14992
2559 start_wqthread (in libsystem_pthread.dylib) + 13 [0x7fffa30ea07d]
2559 _pthread_wqthread (in libsystem_pthread.dylib) + 1023 [0x7fffa30ea48e]
2559 __workq_kernreturn (in libsystem_kernel.dylib) + 10 [0x7fffa300044e]

Total number in stack (recursive counted multiple, when >=5):

Sort by top of stack, same collapsed (when >= 5):
mach_msg_trap (in libsystem_kernel.dylib) 7677
__workq_kernreturn (in libsystem_kernel.dylib) 5118
semaphore_wait_trap (in libsystem_kernel.dylib) 2559

Binary Images:
0x10246e000 - 0x102482ff3 +com.objective-see.luluHelper (0.9.1 - 0.9.1) <96433552-B920-3A60-800E-98985183350C> /Applications/LuLu.app/Contents/Library/LoginItems/LuLu Helper.app/Contents/MacOS/LuLu Helper
0x105d7a000 - 0x105f20fff GLEngine (14.0.16) /System/Library/Frameworks/OpenGL.framework/Resources/GLEngine.bundle/GLEngine
0x105f5f000 - 0x1064baff7 com.apple.driver.AppleIntelHD5000GraphicsGLDriver (10.25.19 - 10.2.5) <41375285-5849-34BB-B178-91CA708A97C7> /System/Library/Extensions/AppleIntelHD5000GraphicsGLDriver.bundle/Contents/MacOS/AppleIntelHD5000GraphicsGLDriver
0x1066d2000 - 0x1066fcfff GLRendererFloat (14.0.16) <32A016EE-63CF-3D07-9BAB-C4EB3E8E479D> /System/Library/Frameworks/OpenGL.framework/Resources/GLRendererFloat.bundle/GLRendererFloat
0x106706000 - 0x10677eff7 com.apple.driver.AppleIntelHD5000GraphicsMTLDriver (10.25.19 - 10.2.5) /System/Library/Extensions/AppleIntelHD5000GraphicsMTLDriver.bundle/Contents/MacOS/AppleIntelHD5000GraphicsMTLDriver
0x10ac19000 - 0x10ac56dc7 dyld (0.0 - ???) <322C06B7-8878-311D-888C-C8FD2CA96FF3> /usr/lib/dyld
0x7fff8836e000 - 0x7fff886b3ff7 com.apple.RawCamera.bundle (7.04 - 914) <86A67D11-9791-3CE6-9FF5-3387C0AB925B> /System/Library/CoreServices/RawCamera.bundle/Contents/MacOS/RawCamera
0x7fff8a219000 - 0x7fff8a219fff com.apple.Accelerate (1.11 - Accelerate 1.11) <916E360F-323C-3AE1-AB3D-D1F3B284AEE9> /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x7fff8a21a000 - 0x7fff8a231ffb libCGInterfaces.dylib (331.5) <17109679-A284-3C72-AA60-DBA815D3062B> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/Libraries/libCGInterfaces.dylib
0x7fff8a232000 - 0x7fff8a74bfeb com.apple.vImage (8.1 - ???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x7fff8a74c000 - 0x7fff8a8bdff3 libBLAS.dylib (1185.50.4) <4087FFE0-627E-3623-96B4-F0A9A1991E09> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x7fff8a8be000 - 0x7fff8a8d2ffb libBNNS.dylib (15) <254698C7-7D36-3FFF-864E-ADEEEE543076> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBNNS.dylib
0x7fff8a8d3000 - 0x7fff8acc9fef libLAPACK.dylib (1185.50.4) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x7fff8acca000 - 0x7fff8ace0fff libLinearAlgebra.dylib (1185.50.4) <345CAACF-7263-36EF-B69B-793EA8B390AF> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLinearAlgebra.dylib
0x7fff8ace1000 - 0x7fff8ace7fff libQuadrature.dylib (3) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libQuadrature.dylib
0x7fff8ace8000 - 0x7fff8acfcff7 libSparseBLAS.dylib (1185.50.4) <67BA432E-FB59-3C78-A8BE-ED4274CBC359> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libSparseBLAS.dylib
0x7fff8acfd000 - 0x7fff8ae84fe7 libvDSP.dylib (600.60.1) <4155F45B-41CD-3782-AE8F-7AE740FD83C3> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x7fff8ae85000 - 0x7fff8af37fff libvMisc.dylib (600.60.1) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x7fff8af38000 - 0x7fff8af38fff com.apple.Accelerate.vecLib (3.11 - vecLib 3.11) <7C5733E7-0568-3E7D-AF61-160F19FED544> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x7fff8b1f7000 - 0x7fff8bfd0ff3 com.apple.AppKit (6.9 - 1504.83.101) <59B096DA-5F32-3987-921A-D32210A52839> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x7fff8bfe2000 - 0x7fff8bfe2fff com.apple.ApplicationServices (48 - 48) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x7fff8bfe3000 - 0x7fff8c051ff7 com.apple.ApplicationServices.ATS (377 - 422.3) <73C230CF-3213-3DCA-B528-664FEC76A90C> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x7fff8c0eb000 - 0x7fff8c21afff libFontParser.dylib (194.13) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontParser.dylib
0x7fff8c21b000 - 0x7fff8c265ff7 libFontRegistry.dylib (196.7) <79411CB6-A093-333A-B669-CEC00B4D5C8E> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontRegistry.dylib
0x7fff8c2c2000 - 0x7fff8c2f5fff libTrueTypeScaler.dylib (194.13) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libTrueTypeScaler.dylib
0x7fff8c362000 - 0x7fff8c40cff7 com.apple.ColorSync (4.12.0 - 502.2) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x7fff8c40d000 - 0x7fff8c45efff com.apple.HIServices (1.22 - 593) <045870A9-1D92-3FEF-8722-671E99A35E71> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x7fff8c45f000 - 0x7fff8c46eff3 com.apple.LangAnalysis (1.7.0 - 1.7.0) <2CBE7F61-2056-3F96-99A1-0D527796AFA6> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x7fff8c46f000 - 0x7fff8c4bcfff com.apple.print.framework.PrintCore (12 - 491) <5027FD58-F0EE-33E4-8577-934CA06CD2AF> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x7fff8c4bd000 - 0x7fff8c4f8fff com.apple.QD (3.12 - 313) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x7fff8c4f9000 - 0x7fff8c504fff com.apple.speech.synthesis.framework (6.6.2 - 6.6.2) <7853EFF4-62B9-394E-B7B8-41A645656820> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x7fff8c505000 - 0x7fff8c711ff7 com.apple.audio.toolbox.AudioToolbox (1.14 - 1.14) <1F4026C6-23C1-39E8-823D-72298FECF75C> /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x7fff8c712000 - 0x7fff8c712fff com.apple.audio.units.AudioUnit (1.14 - 1.14) <2CEE36AF-79E6-3B3E-B369-285E6C1886F7> /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x7fff8c87b000 - 0x7fff8cc57fff com.apple.CFNetwork (811.9 - 811.9) <1E384ECD-D841-356A-8188-61AA8B4A4F2E> /System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x7fff8cc76000 - 0x7fff8cf7ffff com.apple.HIToolbox (2.1.1 - 857.8) <5367366E-747E-32CF-8E76-93CD8E7424C7> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x7fff8cf8a000 - 0x7fff8d021ff3 com.apple.ink.framework (10.9 - 219) <1BD40B45-FD33-3177-A935-565EE5FC79D7> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x7fff8d042000 - 0x7fff8d048ff7 com.apple.speech.recognition.framework (6.0.1 - 6.0.1) <082895DC-3AC7-3DEF-ADCA-5B018C19C9D3> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x7fff8d129000 - 0x7fff8d129fff com.apple.Cocoa (6.11 - 22) <85EDFBE1-75F0-369E-8CA8-C6A639B98FA6> /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x7fff8d273000 - 0x7fff8d300fff com.apple.audio.CoreAudio (4.3.0 - 4.3.0) <78767F88-91D4-31CE-AAC6-1F9407F479BB> /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x7fff8d301000 - 0x7fff8d314fff com.apple.CoreBluetooth (1.0 - 1) /System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetooth
0x7fff8d315000 - 0x7fff8d610fff com.apple.CoreData (120 - 754.2) <4C9CAB2C-60D4-3694-A0A0-5B04B14BD14E> /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x7fff8d611000 - 0x7fff8d6beff7 com.apple.CoreDisplay (1.0 - 1) <53D1EAFE-23A4-398D-BF52-E4299E670DB6> /System/Library/Frameworks/CoreDisplay.framework/Versions/A/CoreDisplay
0x7fff8d6bf000 - 0x7fff8db58ff7 com.apple.CoreFoundation (6.9 - 1349.92) <6D0D0311-7C61-3313-BC55-22B7E876BEFA> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x7fff8db59000 - 0x7fff8e1dbfff com.apple.CoreGraphics (2.0 - 1070.22) /System/Library/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x7fff8e1dc000 - 0x7fff8e41fffb com.apple.CoreImage (12.4.0 - 451.4.9) /System/Library/Frameworks/CoreImage.framework/Versions/A/CoreImage
0x7fff8e584000 - 0x7fff8e584fff com.apple.CoreServices (775.20 - 775.20) /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x7fff8e585000 - 0x7fff8e5d6fff com.apple.AE (712.5 - 712.5) <61F2AE2C-E04E-3FDF-9E88-201325136C83> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x7fff8e5d7000 - 0x7fff8e8b2ff7 com.apple.CoreServices.CarbonCore (1159.6 - 1159.6) <08AC074C-965B-3EDF-8E45-0707C8DE9EAD> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x7fff8e8b3000 - 0x7fff8e8e6fff com.apple.DictionaryServices (1.2 - 274) /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices
0x7fff8e8e7000 - 0x7fff8e8efff3 com.apple.CoreServices.FSEvents (1230.50.1 - 1230.50.1) <2AD1B0E5-7214-37C4-8D11-A27C9CAC0F74> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/FSEvents
0x7fff8e8f0000 - 0x7fff8ea5cffb com.apple.LaunchServices (775.20 - 775.20) /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x7fff8ea5d000 - 0x7fff8eb0dffb com.apple.Metadata (10.7.0 - 1075.40) /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x7fff8eb0e000 - 0x7fff8eb6dfff com.apple.CoreServices.OSServices (775.20 - 775.20) <0DF5747C-12BC-3A6A-BF5A-C12833F6DDEB> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x7fff8eb6e000 - 0x7fff8ebdefff com.apple.SearchKit (1.4.0 - 1.4.0) <7A6DDA2B-03F1-3137-BA9E-1CC211973E26> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x7fff8ebdf000 - 0x7fff8ec24ff7 com.apple.coreservices.SharedFileList (38 - 38) /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SharedFileList.framework/Versions/A/SharedFileList
0x7fff8ecad000 - 0x7fff8edfaffb com.apple.CoreText (352.0 - 544.17) <43466B0D-C061-3636-928B-0417EBD325A8> /System/Library/Frameworks/CoreText.framework/Versions/A/CoreText
0x7fff8edfb000 - 0x7fff8ee30ff3 com.apple.CoreVideo (1.8 - 235.3) /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo
0x7fff8ee31000 - 0x7fff8eea2ffb com.apple.framework.CoreWLAN (11.0 - 1200.31) <4D57D932-6D66-3800-8D33-13951D2E0D84> /System/Library/Frameworks/CoreWLAN.framework/Versions/A/CoreWLAN
0x7fff8efa0000 - 0x7fff8efa5fff com.apple.DiskArbitration (2.7 - 2.7) <70F56042-EF04-3BAF-9E04-90F423FB2BCC> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x7fff8f137000 - 0x7fff8f4ddfff com.apple.Foundation (6.9 - 1349.91) <2A521CFB-7F0F-3226-9DAE-73CEDB6EF4ED> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x7fff8f509000 - 0x7fff8f53aff7 com.apple.GSS (4.0 - 2.0) <30A77A95-CBD4-3BD7-9BFF-8426071F5D9D> /System/Library/Frameworks/GSS.framework/Versions/A/GSS
0x7fff8f5fa000 - 0x7fff8f69dfff com.apple.Bluetooth (5.0.5 - 5.0.5f1) <7BC341AE-0207-3670-AD01-27687D9D6F5E> /System/Library/Frameworks/IOBluetooth.framework/Versions/A/IOBluetooth
0x7fff8f69e000 - 0x7fff8f734ff7 com.apple.framework.IOKit (2.0.2 - 1324.60.4) <454036AD-86AA-3ABB-8C53-B5F654A6824D> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x7fff8f735000 - 0x7fff8f73bffb com.apple.IOSurface (159.12 - 159.12) /System/Library/Frameworks/IOSurface.framework/Versions/A/IOSurface
0x7fff8f78e000 - 0x7fff8f8eefef com.apple.ImageIO.framework (3.3.0 - 1599.13) <443879A7-48C6-37ED-AC0B-166EEEABA662> /System/Library/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x7fff8f8ef000 - 0x7fff8f8f3fff libGIF.dylib (1599.13) <11C5D9D7-B8A1-3D53-BA50-B25976FE6379> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x7fff8f8f4000 - 0x7fff8f9e4ff7 libJP2.dylib (1599.13) /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib
0x7fff8f9e5000 - 0x7fff8fa08ffb libJPEG.dylib (1599.13) /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x7fff8fa09000 - 0x7fff8fa30ff7 libPng.dylib (1599.13) <561865FA-A51B-3EFF-ABFF-B4566B90B1A2> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x7fff8fa31000 - 0x7fff8fa33ff3 libRadiance.dylib (1599.13) <6559253B-8FE2-3884-BC93-95BB7705A6D1> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x7fff8fa34000 - 0x7fff8fa82ffb libTIFF.dylib (1599.13) <8FC594B3-6BBF-3A70-9994-203E9B330B5F> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x7fff907eb000 - 0x7fff90804ff7 com.apple.Kerberos (3.0 - 1) /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
0x7fff90fe4000 - 0x7fff9103ffff com.apple.Metal (87.18 - 87.18) /System/Library/Frameworks/Metal.framework/Versions/A/Metal
0x7fff91928000 - 0x7fff91930fff com.apple.NetFS (6.0 - 4.0) <14A24D00-5673-330A-959D-87F72040DEFF> /System/Library/Frameworks/NetFS.framework/Versions/A/NetFS
0x7fff91b07000 - 0x7fff91b0fff7 libcldcpuengine.dylib (2.8.5) <8086D6FA-2006-3582-B20E-4209D81ACC58> /System/Library/Frameworks/OpenCL.framework/Versions/A/Libraries/libcldcpuengine.dylib
0x7fff91b10000 - 0x7fff91b5eff3 com.apple.opencl (2.8.6 - 2.8.6) /System/Library/Frameworks/OpenCL.framework/Versions/A/OpenCL
0x7fff91b5f000 - 0x7fff91b78ffb com.apple.CFOpenDirectory (10.12 - 194) /System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory
0x7fff91b79000 - 0x7fff91b84ff7 com.apple.OpenDirectory (10.12 - 194) <4298FFD0-B1A7-3064-AF5B-708B3FA38671> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory
0x7fff91b85000 - 0x7fff91b87fff libCVMSPluginSupport.dylib (14.0.16) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCVMSPluginSupport.dylib
0x7fff91b88000 - 0x7fff91b8bff7 libCoreFSCache.dylib (156.3) <687C4CC3-6537-344B-8BE1-5234C8CB2864> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreFSCache.dylib
0x7fff91b8c000 - 0x7fff91b90fff libCoreVMClient.dylib (156.3) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClient.dylib
0x7fff91b91000 - 0x7fff91b9aff7 libGFXShared.dylib (14.0.16) <170D07F3-2D30-3D4B-80A0-971E0A765709> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGFXShared.dylib
0x7fff91b9b000 - 0x7fff91ba6fff libGL.dylib (14.0.16) <0801F3B9-A525-32BB-9BC0-478947CE21D9> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x7fff91ba7000 - 0x7fff91be3ff7 libGLImage.dylib (14.0.16) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x7fff91be4000 - 0x7fff91d5aff3 libGLProgrammability.dylib (14.0.16) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib
0x7fff91d5b000 - 0x7fff91d9cff7 libGLU.dylib (14.0.16) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x7fff92704000 - 0x7fff92712fff com.apple.opengl (14.0.16 - 14.0.16) /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x7fff93264000 - 0x7fff93464fff com.apple.QuartzCore (1.11 - 453.39.5) <34F65F8C-01D2-3120-BD04-2620BB652D50> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x7fff939cd000 - 0x7fff93ccffff com.apple.security (7.0 - 57740.60.23) <9F23DF40-1A2F-3177-8DCE-FBC4F8F43BAF> /System/Library/Frameworks/Security.framework/Versions/A/Security
0x7fff93cd0000 - 0x7fff93d45fff com.apple.securityfoundation (6.0 - 55132.50.7) /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x7fff93d70000 - 0x7fff93d73ff3 com.apple.xpc.ServiceManagement (1.0 - 1) /System/Library/Frameworks/ServiceManagement.framework/Versions/A/ServiceManagement
0x7fff940fa000 - 0x7fff94169ff7 com.apple.SystemConfiguration (1.14 - 1.14) /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x7fff969c0000 - 0x7fff969dbff3 com.apple.AppContainer (4.0 - 307.50.21) /System/Library/PrivateFrameworks/AppContainer.framework/Versions/A/AppContainer
0x7fff969dc000 - 0x7fff969e9ff3 com.apple.AppSandbox (4.0 - 307.50.21) /System/Library/PrivateFrameworks/AppSandbox.framework/Versions/A/AppSandbox
0x7fff969ea000 - 0x7fff96a0cffb com.apple.framework.Apple80211 (12.0 - 1200.47) <869BFE4C-3F15-349E-9715-0A48ED725EAE> /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Apple80211
0x7fff96a0d000 - 0x7fff96a1cfeb com.apple.AppleFSCompression (88.50.3 - 1.0) <478E8BFF-8BA2-375E-BE02-BA27F115C15A> /System/Library/PrivateFrameworks/AppleFSCompression.framework/Versions/A/AppleFSCompression
0x7fff96b06000 - 0x7fff96b9197f com.apple.AppleJPEG (1.0 - 1) /System/Library/PrivateFrameworks/AppleJPEG.framework/Versions/A/AppleJPEG
0x7fff96fc4000 - 0x7fff97042ff7 com.apple.backup.framework (1.8.5 - 1.8.5) /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup
0x7fff97ccd000 - 0x7fff97cf4ff3 com.apple.ChunkingLibrary (173 - 173) /System/Library/PrivateFrameworks/ChunkingLibrary.framework/Versions/A/ChunkingLibrary
0x7fff98619000 - 0x7fff98622ffb com.apple.CommonAuth (4.0 - 2.0) <44E4467E-90BB-3CC4-9E57-9B09D7E90081> /System/Library/PrivateFrameworks/CommonAuth.framework/Versions/A/CommonAuth
0x7fff98d6b000 - 0x7fff98d7bfff com.apple.CoreEmoji (1.0 - 40.3.3) /System/Library/PrivateFrameworks/CoreEmoji.framework/Versions/A/CoreEmoji
0x7fff990b6000 - 0x7fff990e6ff3 com.apple.CoreServicesInternal (276.2 - 276.2) <05EB7D45-DD4C-3A0F-AC63-A0C2A68E6481> /System/Library/PrivateFrameworks/CoreServicesInternal.framework/Versions/A/CoreServicesInternal
0x7fff99377000 - 0x7fff99406ff7 com.apple.CoreSymbolication (62046) <9685A34A-C6FD-3681-8F7E-211D48298DD2> /System/Library/PrivateFrameworks/CoreSymbolication.framework/Versions/A/CoreSymbolication
0x7fff99407000 - 0x7fff99546fe7 com.apple.coreui (2.1 - 431.3) <8D0FA478-9B6C-3D6D-8ADF-8677BA0BF134> /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI
0x7fff99547000 - 0x7fff99617ff3 com.apple.CoreUtils (5.1 - 510.31) <4AC4A8E9-C1E8-3FBA-AF0E-96F9404D826D> /System/Library/PrivateFrameworks/CoreUtils.framework/Versions/A/CoreUtils
0x7fff99667000 - 0x7fff996ccff3 com.apple.framework.CoreWiFi (12.0 - 1200.31) /System/Library/PrivateFrameworks/CoreWiFi.framework/Versions/A/CoreWiFi
0x7fff996cd000 - 0x7fff996dbff7 com.apple.CrashReporterSupport (10.12 - 827) <802A9B81-E349-348B-90AB-10E40B654250> /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/CrashReporterSupport
0x7fff9974d000 - 0x7fff99757ffb com.apple.framework.DFRFoundation (1.0 - 104.25) <7CFF896C-EF22-3941-BB3D-F3615CE4C908> /System/Library/PrivateFrameworks/DFRFoundation.framework/Versions/A/DFRFoundation
0x7fff99758000 - 0x7fff9975cff3 com.apple.DSExternalDisplay (3.1 - 380) <4B5E3FF0-E8C3-38CC-BF72-418C928956AB> /System/Library/PrivateFrameworks/DSExternalDisplay.framework/Versions/A/DSExternalDisplay
0x7fff99792000 - 0x7fff99807ffb com.apple.datadetectorscore (7.0 - 539.1) <84F04DEF-DF0A-3F93-AEE9-B6FAC781164B> /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDetectorsCore
0x7fff99843000 - 0x7fff99882fff com.apple.DebugSymbols (137 - 137) <58A70B66-2628-3CFE-B103-2200D95FC5F7> /System/Library/PrivateFrameworks/DebugSymbols.framework/Versions/A/DebugSymbols
0x7fff99883000 - 0x7fff99994fff com.apple.desktopservices (1.11.5 - 1.11.5) <46A9D4F3-1EF8-373C-98A4-AD48D285E484> /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x7fff99c7c000 - 0x7fff9a0adff7 com.apple.vision.FaceCore (3.3.2 - 3.3.2) <9391D5A3-738C-3136-9D07-518CB43DBADA> /System/Library/PrivateFrameworks/FaceCore.framework/Versions/A/FaceCore
0x7fff9b404000 - 0x7fff9b404fff libmetal_timestamp.dylib (600.0.49.9) /System/Library/PrivateFrameworks/GPUCompiler.framework/libmetal_timestamp.dylib
0x7fff9b411000 - 0x7fff9b41cff3 libGPUSupportMercury.dylib (14.0.16) <1216909A-E38E-335F-9F46-9362753AE0D1> /System/Library/PrivateFrameworks/GPUSupport.framework/Versions/A/Libraries/libGPUSupportMercury.dylib
0x7fff9b6d5000 - 0x7fff9b6f1fff com.apple.GenerationalStorage (2.0 - 267.2) <22381303-B9A8-32D8-BDBF-871F0CDD81A5> /System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/GenerationalStorage
0x7fff9be02000 - 0x7fff9be78ff3 com.apple.Heimdal (4.0 - 2.0) <9541C717-96FF-32D3-8F0B-5048525DAA70> /System/Library/PrivateFrameworks/Heimdal.framework/Versions/A/Heimdal
0x7fff9be79000 - 0x7fff9be8afff com.apple.HelpData (2.1.12 - 100.1) /System/Library/PrivateFrameworks/HelpData.framework/Versions/A/HelpData
0x7fff9c493000 - 0x7fff9c49affb com.apple.IOAccelerator (311.16.2 - 311.16.2) <96FA28B6-B03D-3A5E-AF07-0AE4486D2968> /System/Library/PrivateFrameworks/IOAccelerator.framework/Versions/A/IOAccelerator
0x7fff9c49c000 - 0x7fff9c4b0ff7 com.apple.IOPresentment (1.0 - 29.10) <30DF04EE-10E2-353F-845F-A97B87DF3207> /System/Library/PrivateFrameworks/IOPresentment.framework/Versions/A/IOPresentment
0x7fff9c4b1000 - 0x7fff9c4d3fff com.apple.IconServices (74.4 - 74.4) <218DDD05-35F4-3833-B98D-471ED0EBC031> /System/Library/PrivateFrameworks/IconServices.framework/Versions/A/IconServices
0x7fff9c5ba000 - 0x7fff9c771fff com.apple.LanguageModeling (1.0 - 123.2.5) /System/Library/PrivateFrameworks/LanguageModeling.framework/Versions/A/LanguageModeling
0x7fff9d092000 - 0x7fff9d10bff7 com.apple.MetalPerformanceShaders.MetalPerformanceShaders (1.0 - 1) /System/Library/PrivateFrameworks/MetalPerformanceShaders.framework/Versions/A/MetalPerformanceShaders
0x7fff9d294000 - 0x7fff9d2bcff7 com.apple.MultitouchSupport.framework (368.16 - 368.16) /System/Library/PrivateFrameworks/MultitouchSupport.framework/Versions/A/MultitouchSupport
0x7fff9d36e000 - 0x7fff9d379fff com.apple.NetAuth (6.2 - 6.2) <97F487D6-8089-31A8-B68C-6C1EAC6ED1B5> /System/Library/PrivateFrameworks/NetAuth.framework/Versions/A/NetAuth
0x7fff9dc51000 - 0x7fff9dc92ff3 com.apple.PerformanceAnalysis (1.148.3 - 148.3) <8B63D1A1-C0B5-35DC-865F-BFC5682237E4> /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/PerformanceAnalysis
0x7fff9e37a000 - 0x7fff9e394fff com.apple.ProtocolBuffer (1 - 249.1) /System/Library/PrivateFrameworks/ProtocolBuffer.framework/Versions/A/ProtocolBuffer
0x7fff9e3ad000 - 0x7fff9e3d0ff3 com.apple.RemoteViewServices (2.0 - 124) <6B967FDA-6591-302C-BA0A-76C4856E584E> /System/Library/PrivateFrameworks/RemoteViewServices.framework/Versions/A/RemoteViewServices
0x7fff9f09a000 - 0x7fff9f09dfff com.apple.SecCodeWrapper (4.0 - 307.50.21) /System/Library/PrivateFrameworks/SecCodeWrapper.framework/Versions/A/SecCodeWrapper
0x7fff9f12c000 - 0x7fff9f1b9fff com.apple.Sharing (696.2.67 - 696.2.67) /System/Library/PrivateFrameworks/Sharing.framework/Versions/A/Sharing
0x7fff9f1ba000 - 0x7fff9f1d9ff7 com.apple.shortcut (2.16 - 98) <6C0435B1-83DD-3254-B0D3-3B86C6CE606A> /System/Library/PrivateFrameworks/Shortcut.framework/Versions/A/Shortcut
0x7fff9f1da000 - 0x7fff9f440fe3 com.apple.SkyLight (1.600.0 - 170.3.1) <585B0A2F-9696-356E-9FD6-19A06E4D8569> /System/Library/PrivateFrameworks/SkyLight.framework/Versions/A/SkyLight
0x7fff9f61f000 - 0x7fff9f62bff7 com.apple.SpeechRecognitionCore (3.3.2 - 3.3.2) <684BD1EA-8268-331C-A5A9-080EB375C658> /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/SpeechRecognitionCore
0x7fff9fd17000 - 0x7fff9fd8bfdf com.apple.Symbolication (62048.1) <1A30ED19-7532-3F46-9DD3-9879A973D0CF> /System/Library/PrivateFrameworks/Symbolication.framework/Versions/A/Symbolication
0x7fffa01ca000 - 0x7fffa01d0ff7 com.apple.TCC (1.0 - 1) <911B534B-4AC7-34E4-935E-E42ECD008CBC> /System/Library/PrivateFrameworks/TCC.framework/Versions/A/TCC
0x7fffa025c000 - 0x7fffa0322ff7 com.apple.TextureIO (2.8 - 2.8) <3D61E533-4156-3B21-B7ED-CB823E680DFC> /System/Library/PrivateFrameworks/TextureIO.framework/Versions/A/TextureIO
0x7fffa0396000 - 0x7fffa0397fff com.apple.TrustEvaluationAgent (2.0 - 28.50.1) /System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/TrustEvaluationAgent
0x7fffa0398000 - 0x7fffa0528ff3 com.apple.UIFoundation (1.0 - 490.7) <2A3063FE-1790-3510-8A0E-AEC581D42B7E> /System/Library/PrivateFrameworks/UIFoundation.framework/Versions/A/UIFoundation
0x7fffa0ff7000 - 0x7fffa10b7fff com.apple.ViewBridge (283 - 283) <25A635B3-C87C-3D3A-ADF3-539713FA1048> /System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/ViewBridge
0x7fffa1502000 - 0x7fffa1508fff com.apple.XPCService (2.0 - 1) <4B28B225-2105-33F4-9ED0-F04288FF4FB1> /System/Library/PrivateFrameworks/XPCService.framework/Versions/A/XPCService
0x7fffa15d9000 - 0x7fffa15dbffb com.apple.loginsupport (1.0 - 1) /System/Library/PrivateFrameworks/login.framework/Versions/A/Frameworks/loginsupport.framework/Versions/A/loginsupport
0x7fffa1630000 - 0x7fffa164bff7 libCRFSuite.dylib (34) /usr/lib/libCRFSuite.dylib
0x7fffa164c000 - 0x7fffa1657fff libChineseTokenizer.dylib (21) <0886E908-A825-36AF-B94B-2361FD8BC2A1> /usr/lib/libChineseTokenizer.dylib
0x7fffa16e9000 - 0x7fffa16eaff3 libDiagnosticMessagesClient.dylib (102) <84A04D24-0E60-3810-A8C0-90A65E2DF61A> /usr/lib/libDiagnosticMessagesClient.dylib
0x7fffa16eb000 - 0x7fffa18fefff libFosl_dynamic.dylib (16.39) /usr/lib/libFosl_dynamic.dylib
0x7fffa191a000 - 0x7fffa1921fff libMatch.1.dylib (27) <70D4BD2A-9383-37F2-B0D6-9B592D236601> /usr/lib/libMatch.1.dylib
0x7fffa1922000 - 0x7fffa1922fff libOpenScriptingUtil.dylib (172.1) <0F1BA407-97D1-36F6-882D-A355EAAD5E00> /usr/lib/libOpenScriptingUtil.dylib
0x7fffa1923000 - 0x7fffa1927ffb libScreenReader.dylib (477.40.6) /usr/lib/libScreenReader.dylib
0x7fffa1928000 - 0x7fffa1929ffb libSystem.B.dylib (1238.60.2) /usr/lib/libSystem.B.dylib
0x7fffa1995000 - 0x7fffa19c0ff3 libarchive.2.dylib (41.70.2) <907D1FB1-9A65-33F5-AFC8-0B6E5AE9D83A> /usr/lib/libarchive.2.dylib
0x7fffa19c1000 - 0x7fffa1a3dfc7 libate.dylib (1.12.13) /usr/lib/libate.dylib
0x7fffa1a41000 - 0x7fffa1a41ff3 libauto.dylib (187) <34388D0B-C539-3C1B-9408-2BC152162E43> /usr/lib/libauto.dylib
0x7fffa1a42000 - 0x7fffa1a52ff3 libbsm.0.dylib (34) <20084796-B04D-3B35-A003-EA11459557A9> /usr/lib/libbsm.0.dylib
0x7fffa1a53000 - 0x7fffa1a61ff7 libbz2.1.0.dylib (38) /usr/lib/libbz2.1.0.dylib
0x7fffa1a62000 - 0x7fffa1ab8ff7 libc++.1.dylib (307.5) <0B43BB5D-E6EB-3464-8DE9-B41AC8ED9D1C> /usr/lib/libc++.1.dylib
0x7fffa1ab9000 - 0x7fffa1ae2ff7 libc++abi.dylib (307.4) /usr/lib/libc++abi.dylib
0x7fffa1ae3000 - 0x7fffa1af3ffb libcmph.dylib (6) <2B5D405E-2D0B-3320-ABD6-622934C86ABE> /usr/lib/libcmph.dylib
0x7fffa1af4000 - 0x7fffa1b0afcf libcompression.dylib (39) /usr/lib/libcompression.dylib
0x7fffa1b0b000 - 0x7fffa1b0bff7 libcoretls.dylib (121.50.4) <64B1001E-10F6-3542-A3B2-C4B49F51817F> /usr/lib/libcoretls.dylib
0x7fffa1b0c000 - 0x7fffa1b0dff3 libcoretls_cfhelpers.dylib (121.50.4) <1A10303E-5EB0-3C7C-9165-021FCDFD934D> /usr/lib/libcoretls_cfhelpers.dylib
0x7fffa1bc7000 - 0x7fffa1cabff7 libcrypto.0.9.8.dylib (64.50.7) /usr/lib/libcrypto.0.9.8.dylib
0x7fffa1e49000 - 0x7fffa1e9cff7 libcups.2.dylib (450) <9950BFCB-7882-33C9-9ECF-CE66773C5657> /usr/lib/libcups.2.dylib
0x7fffa1f19000 - 0x7fffa1f19fff libenergytrace.dylib (15) /usr/lib/libenergytrace.dylib
0x7fffa1f29000 - 0x7fffa1f2eff7 libheimdal-asn1.dylib (498.50.9) <92C953A2-5E1D-39E9-875E-92F29A12D6FB> /usr/lib/libheimdal-asn1.dylib
0x7fffa1f2f000 - 0x7fffa2021ff7 libiconv.2.dylib (50) <42125B35-81D7-3FC4-9475-A26DBE10884D> /usr/lib/libiconv.2.dylib
0x7fffa2022000 - 0x7fffa2247ffb libicucore.A.dylib (57167.0.1) /usr/lib/libicucore.A.dylib
0x7fffa224d000 - 0x7fffa224efff liblangid.dylib (126) <2085E7A7-9A34-3735-87F4-F174EF8EABF0> /usr/lib/liblangid.dylib
0x7fffa224f000 - 0x7fffa2268ffb liblzma.5.dylib (10) <44BD0279-99DD-36B5-8A6E-C11432E2098D> /usr/lib/liblzma.5.dylib
0x7fffa2269000 - 0x7fffa227fff7 libmarisa.dylib (5) <9030D214-5D0F-30CB-AC03-902C63909362> /usr/lib/libmarisa.dylib
0x7fffa2280000 - 0x7fffa2528ff7 libmecabra.dylib (744.8) /usr/lib/libmecabra.dylib
0x7fffa255b000 - 0x7fffa25d5ff3 libnetwork.dylib (856.60.1) <191E99F5-4723-3180-8013-02AF2F9AE4B8> /usr/lib/libnetwork.dylib
0x7fffa25d6000 - 0x7fffa29a8047 libobjc.A.dylib (709.1) <70614861-0340-32E2-85ED-FE65759CDFFA> /usr/lib/libobjc.A.dylib
0x7fffa29ab000 - 0x7fffa29affff libpam.2.dylib (21.30.1) <71EB0D88-DE84-3C8D-A2C5-58AA282BC5BC> /usr/lib/libpam.2.dylib
0x7fffa29b0000 - 0x7fffa29e1fff libpcap.A.dylib (67.60.2) /usr/lib/libpcap.A.dylib
0x7fffa29fe000 - 0x7fffa2a1affb libresolv.9.dylib (64) /usr/lib/libresolv.9.dylib
0x7fffa2a1b000 - 0x7fffa2a54fff libsandbox.1.dylib (592.70.2) /usr/lib/libsandbox.1.dylib
0x7fffa2a6a000 - 0x7fffa2bb8ff7 libsqlite3.dylib (254.8) <1ECF7DF7-7A07-3B4B-A63B-F4EFF6BC7ACF> /usr/lib/libsqlite3.dylib
0x7fffa2cad000 - 0x7fffa2cbafff libxar.1.dylib (357) <69547C64-E811-326F-BBED-490C6361BDCB> /usr/lib/libxar.1.dylib
0x7fffa2cbb000 - 0x7fffa2daaff3 libxml2.2.dylib (30.20) <40B1027A-43B6-38EC-9EB9-9E7871E98CBC> /usr/lib/libxml2.2.dylib
0x7fffa2dab000 - 0x7fffa2dd4fff libxslt.1.dylib (15.9.1) /usr/lib/libxslt.1.dylib
0x7fffa2dd5000 - 0x7fffa2de6ff3 libz.1.dylib (67) <46E3FFA2-4328-327A-8D34-A03E20BFFB8E> /usr/lib/libz.1.dylib
0x7fffa2df5000 - 0x7fffa2df9ff7 libcache.dylib (79) <093A4DAB-8385-3D47-A350-E20CB7CCF7BF> /usr/lib/system/libcache.dylib
0x7fffa2dfa000 - 0x7fffa2e04fff libcommonCrypto.dylib (60092.50.5) <8A64D1B0-C70E-385C-92F0-E669079FDA90> /usr/lib/system/libcommonCrypto.dylib
0x7fffa2e05000 - 0x7fffa2e0cfff libcompiler_rt.dylib (62) <55D47421-772A-32AB-B529-1A46C2F43B4D> /usr/lib/system/libcompiler_rt.dylib
0x7fffa2e0d000 - 0x7fffa2e15fff libcopyfile.dylib (138) <819BEA3C-DF11-3E3D-A1A1-5A51C5BF1961> /usr/lib/system/libcopyfile.dylib
0x7fffa2e16000 - 0x7fffa2e99fdf libcorecrypto.dylib (442.50.19) <65D7165E-2E71-335D-A2D6-33F78E2DF0C1> /usr/lib/system/libcorecrypto.dylib
0x7fffa2e9a000 - 0x7fffa2ecbfff libdispatch.dylib (703.50.37) <6582BAD6-ED27-3B30-B620-90B1C5A4AE3C> /usr/lib/system/libdispatch.dylib
0x7fffa2ecc000 - 0x7fffa2ed1ffb libdyld.dylib (433.5) <00117F79-5DB8-37D9-9AAF-BEE7B1601E75> /usr/lib/system/libdyld.dylib
0x7fffa2ed2000 - 0x7fffa2ed2ffb libkeymgr.dylib (28) <7AA011A9-DC21-3488-BF73-3B5B14D1FDD6> /usr/lib/system/libkeymgr.dylib
0x7fffa2ed3000 - 0x7fffa2edffff libkxld.dylib (3789.73.11) <0FB7A614-BB9B-3C20-8383-C8F7A428DB26> /usr/lib/system/libkxld.dylib
0x7fffa2ee0000 - 0x7fffa2ee0fff liblaunch.dylib (972.70.1) /usr/lib/system/liblaunch.dylib
0x7fffa2ee1000 - 0x7fffa2ee6ff3 libmacho.dylib (898) <17D5D855-F6C3-3B04-B680-E9BF02EF8AED> /usr/lib/system/libmacho.dylib
0x7fffa2ee7000 - 0x7fffa2ee9ff3 libquarantine.dylib (85.50.1) <12448CC2-378E-35F3-BE33-9DC395A5B970> /usr/lib/system/libquarantine.dylib
0x7fffa2eea000 - 0x7fffa2eebffb libremovefile.dylib (45) <38D4CB9C-10CD-30D3-8B7B-A515EC75FE85> /usr/lib/system/libremovefile.dylib
0x7fffa2eec000 - 0x7fffa2f04ff7 libsystem_asl.dylib (349.50.5) <096E4228-3B7C-30A6-8B13-EC909A64499A> /usr/lib/system/libsystem_asl.dylib
0x7fffa2f05000 - 0x7fffa2f05ff7 libsystem_blocks.dylib (67) <10DC5404-73AB-35B3-A277-A8AFECB476EB> /usr/lib/system/libsystem_blocks.dylib
0x7fffa2f06000 - 0x7fffa2f93fef libsystem_c.dylib (1158.50.2) /usr/lib/system/libsystem_c.dylib
0x7fffa2f94000 - 0x7fffa2f97ffb libsystem_configuration.dylib (888.60.2) /usr/lib/system/libsystem_configuration.dylib
0x7fffa2f98000 - 0x7fffa2f9bfff libsystem_coreservices.dylib (41.4) <7D26DE79-B424-3450-85E1-F7FAB32714AB> /usr/lib/system/libsystem_coreservices.dylib
0x7fffa2f9c000 - 0x7fffa2fb4fff libsystem_coretls.dylib (121.50.4) /usr/lib/system/libsystem_coretls.dylib
0x7fffa2fb5000 - 0x7fffa2fbbfff libsystem_dnssd.dylib (765.50.9) /usr/lib/system/libsystem_dnssd.dylib
0x7fffa2fbc000 - 0x7fffa2fe5ff7 libsystem_info.dylib (503.50.4) <611DB84C-BF70-3F92-8702-B9F28A900920> /usr/lib/system/libsystem_info.dylib
0x7fffa2fe6000 - 0x7fffa3008ff7 libsystem_kernel.dylib (3789.73.11) <77F5E77C-FE5F-3C5B-8074-D1FEEC85BD91> /usr/lib/system/libsystem_kernel.dylib
0x7fffa3009000 - 0x7fffa3050fe7 libsystem_m.dylib (3121.6) <86D499B5-BBDC-3D3B-8A4E-97AE8E6672A4> /usr/lib/system/libsystem_m.dylib
0x7fffa3051000 - 0x7fffa306fff7 libsystem_malloc.dylib (116.50.8) /usr/lib/system/libsystem_malloc.dylib
0x7fffa3070000 - 0x7fffa30c9ffb libsystem_network.dylib (856.60.1) <369D0221-56CA-3C3E-9EDE-94B41CAE77B7> /usr/lib/system/libsystem_network.dylib
0x7fffa30ca000 - 0x7fffa30d3ff3 libsystem_networkextension.dylib (563.60.2) /usr/lib/system/libsystem_networkextension.dylib
0x7fffa30d4000 - 0x7fffa30ddff3 libsystem_notify.dylib (165.20.1) /usr/lib/system/libsystem_notify.dylib
0x7fffa30de000 - 0x7fffa30e6fe7 libsystem_platform.dylib (126.50.8) <897462FD-B318-321B-A554-E61982630F7E> /usr/lib/system/libsystem_platform.dylib
0x7fffa30e7000 - 0x7fffa30f1ff7 libsystem_pthread.dylib (218.60.3) /usr/lib/system/libsystem_pthread.dylib
0x7fffa30f2000 - 0x7fffa30f5ff7 libsystem_sandbox.dylib (592.70.2) <19320A42-2E3B-361B-BBDA-2F5F2E87B100> /usr/lib/system/libsystem_sandbox.dylib
0x7fffa30f6000 - 0x7fffa30f7ff3 libsystem_secinit.dylib (24.50.4) /usr/lib/system/libsystem_secinit.dylib
0x7fffa30f8000 - 0x7fffa30ffffb libsystem_symptoms.dylib (532.50.47) <3390E07C-C1CE-348F-ADBD-2C5440B45EAA> /usr/lib/system/libsystem_symptoms.dylib
0x7fffa3100000 - 0x7fffa3113ff7 libsystem_trace.dylib (518.70.1) /usr/lib/system/libsystem_trace.dylib
0x7fffa3114000 - 0x7fffa3119ffb libunwind.dylib (35.3) <3D50D8A8-C460-334D-A519-2DA841102C6B> /usr/lib/system/libunwind.dylib
0x7fffa311a000 - 0x7fffa3143ff7 libxpc.dylib (972.70.1) /usr/lib/system/libxpc.dylib
Sample analysis of process 335 written to file /dev/stdout
`

any reason why 10.11.* is not supported?

Hello,
Minor issue, I've just installed LuLu 0.9.2, but in the preferences window 0.9.1 is still displayed (cf screenshot attached).
Otherwise I like the idea a lot, keep up the good work!

In my home environment, with LuLu enabled wi-fi connection end up with no ip addresses assigned. When i disable LuLu, then it succeed.

Hi,
fresh install of LuLu 0.91 on macOS 10.13.2, I noticed that the update check fails.

The UI shows this:

And I see this in syslog:
com.objective-see.luluHelper[483]: LULU(483) ERROR: update check failed

I do see that the agent is contacting 65.60.38.45:443, completing the TLS handshake but obviously I have no way of knowing what's the server answer...

With LULU enabled, I cannot connect through the built in Cisco IPSec VPN client. If I disable, I can connect to VPN and then re–enable LULU afterwards.

Hi Patrick,

I just installed the latest release of LuLu. Installation went well, reboot, etc.

Starting iTunes it is no longer able connect to any AirPlay device. When I disable LuLu it works again. Enabling LuLu during the replay of a song via AirPlay kills the stream again.

Let me know if I can support you with some more info!

Other then that, great stuff! Thanks for all the work!

Tom

macOS High Sierra
10.13.4 (17E202)
uname -a
Darwin macbook.local 17.5.0 Darwin Kernel Version 17.5.0: Fri Apr 13 19:32:32 PDT 2018; root:xnu-4570.51.2~1/RELEASE_X86_64 x86_64

connecting to 127.0.0.1 should be allowed by default
or at least please add the option to create a rule that would allow such connection for ANY application.

I've set up several VPN connections following instruction in this Ivacy guide ttps://support.ivacy.com/kb/how-to-setup-vpn-on-mac-manually/
I made sure I allowed the following processes in LULU:
/usr/libexec/xpcproxy
/usr/sbin/racoon
/usr/sbin/pppd
and a few others which I found in the console and activity monitor
Still, I can't connect when LULU is enabled.
I tried to check the "Allow the installed applications" settings in LULU preferences, I added Lulu in the exceptions in the system security settings and the built-in firewall. No result.
I can connect thru VPN whenever I disable LULU, but after I enable it even after the connection is established, the network becomes 'frozen' and I have to disable LULU eventually.

Any workaround about this would be greatly appreciated )

If another app gains focus the LuLu alert (which may be blocking said app) may be hidden.

Steps I took

Switch on macbook and log in.
Block LuLu prompt for /usr/libexec/captiveagent.
Open iTerm.
ssh user@host and hit enter.

Expected outcome

Prompt from LuLu, accept it, and ssh connects.

Actual outcome

No prompt from Lulu for 2m 55s. Then got a LuLu prompt for ssh which I approved and ssh connected.

System info

macOS 10.13.2 (17C205)
LuLu 0.9.1 installed via brew

Hi people,
First of all, a very nice tool I really like it! congrats guys!
I was using the version 0.9.0 of LuLu on my macOS Sierra 10.12.4~6 for several months.
After I installed it, I started to see awkward behavior when I wanted to connect to a samba service allocated in an Ubuntu 14.04.3, running as a virtual machine on my computer (with VMware Fusion), First, it worked fine, but then when I wanted to connect to SAMBA folder, the connection process got stuck and always showing "connecting... " message. So, I had to disable LuLu and then the connection worked. Even using the GUI (provided by the Finder ) or using the console, the result was the same, it was not connecting. However, after a couple a month, the connection totally got stuck and it disallows me to work with my VM. Unfortunately, because of that, I had to uninstall LuLu (BTW this process was really painful, even O.S got broken and I had to reset it),I had no option, even I could not close LuLu (IDK where it is that option).

Well, I hope you can fix it. I going to wait a while and I will upgrade my system to High Sierra and I will try again with LuLu

thanks, guys !

Related issues:
#46
#20

Under certain circumstances, LuLu can get caught in an apparently infinite popup notification loop.

In my case, this happened when I left the notification popup open while searching for information about what nsurlsessiond was connecting to, and then went for dinner.

It appeared that nsurlsessiond kept trying to connect in the meantime, creating more notification queue entries while I was away.

Then once I clicked "accept", LuLu proceeded to show me identical popup warnings for as long as I cared to keep clicking "accept."

Killing the LuLu Helper application fixed the problem -- it restarted, showing just ONE popup asking about nsurlsessiond, and everything went on its merry way.

It looks like LuLu needs some internal notification dupe checking.

Feature request: way to export and import rules. It’ll be particularly useful for fresh installs.

You likely already thought about this, but opening an issue nonetheless to keep track.

Thank you for all your great tools, and for adding CLI installs and uninstalls to all of them!

This warning happens to me both when installing by brew:

17:52:12 ➜  LuLu_0.9.2  brew cask install lulu
==> Satisfying dependencies
==> Downloading https://github.com/objective-see/LuLu/releases/download/0.9.2/Lu
######################################################################## 100.0%
==> Verifying checksum for Cask lulu
==> Installing Cask lulu
==> Running installer script 'configure.sh'
==> installing
==> kext installed and loaded
==> launch daemon installed and loaded
==> dyld: warning, LC_RPATH @executable_path/../Frameworks in /Applications/LuLu
==> dyld: warning, LC_RPATH @executable_path/../Frameworks in /Applications/LuLu
==> dyld: warning, LC_RPATH @executable_path/../Frameworks in /Applications/LuLu
==> install complete
🍺  lulu was successfully installed!

or by shell:

17:46:09 ➜  LuLu_0.9.2  sudo bash configure.sh -install
installing
kext installed and loaded
launch daemon installed and loaded
dyld: warning, LC_RPATH @executable_path/../Frameworks in /Applications/LuLu.app/Contents/MacOS/LuLu being ignored in restricted program because of @executable_path
dyld: warning, LC_RPATH @executable_path/../Frameworks in /Applications/LuLu.app/Contents/MacOS/LuLu being ignored in restricted program because of @executable_path
dyld: warning, LC_RPATH @executable_path/../Frameworks in /Applications/LuLu.app/Contents/MacOS/LuLu being ignored in restricted program because of @executable_path

Any advice on what it means? I don't see the LuLu icon at the top of my menu bar, though I can find the LuluDaemon running in Activity Monitor. Do I need to log out and log back in to trigger it, or has something gone wrong with my install?

System details:

MacBook Pro (Retina, 15-inch, Mid 2014)
MacOS Sierra 10.12.6 (16G1114)

Hi,

Probably asking for a lot, but was just wondering if this is planned for the future?

Thanks :)

It would be nice to have either/both whois and reverse dns along with the IP the application is trying to connect to. Maybe those info can be loaded asyncronously, after the dialog has been shown

Installed LuLu v0.9.3 with brew install caskroom/cask/lulu haven't changed any setting.

Run couple of programs and accessed internet - firefox, safari, viber - no notification about internet access.

I've enabled passive mode but it's still displaying access notifications

LuLu 0.9.4.
Transmission 2.84 (14306)

How to reproduce:
enable LuLu
add Transmission allowed rule
find magnet torrent link, click it to add torrent into Transmission
transmission freezes out = not downloading, not reacting on any clicks, colour wheel over Transmission window

How to fix:
force quit Transmission
disable LuLu
open Transmission again and everything works

After I restarted my computer with this attempt at installing when I reopened my Mac's desktop Spotify app, Spotify would hang and just crash until I killed the Lulu Daemon running in the background.

This was pretty unintuitive behaviour, particularly as I'm not getting any messages from Lulu telling me its blocking this outgoing connection. Is this because I have an incorrect installation of Lulu?

Ideally in these scenarios Lulu should pop up and make it clear that it's interfering with Spotify's attempt to work.

Hi,

I have installed the latest beta today.
Installed —> restart -> Lulu says open preferences -> click on appeov but doesn’t get a new window

What can I do ?

Tried the latest beta, only to be presented with the following scenario;

Able to connect to my WLAN, although there's a "!" on it => no Internet connection (told by MacOS to restart router or call ISP)
Router reboot did nothing of any sort, only way out is to disable LuLu..
I'm back on 0.9.2, which works - gladly

Thanks so much for all the time & work you spend on this and other things to enhance the Apple-Universe!

All the best

It seems to me that the installer ought to be able to:

• unload the old LuLu module (/sbin/kextunload), if present;
• install the new LuLu module;
• load the new module into kernel memory (/sbin/kextload); and finally,
• restart the LuLu application in user space.

A restart of the machine should not be required. I did notice though that trying to unload the module isn't possible, the kernel says the services failed to terminate. Is this intentional?

I think good idea if that will have possibility to show few allow/block requests at one time (now only 1 from queue), cause:

1. installed LuLu
2. saw unknown process and unknown ip address
3. trying whois, but no way, cause i can't allow whois traffic until close previous window

I've installed LuLu and worked on the computer for about an hour with it working, everything was just great. A couple of deamon ask for permissions, which I guess is normal with a new install.

But, when my work was done I just close the lid of my macbook and went to sleep. 36 hours later, after opening the mac I get many many many of the same warning, about Apple's geod deamon.

I know LuLu is still beta: this is not a complaint, rather just a bug report to help out.

Thanks for all of your amazing software/blog posts/talks/...

I really would like more granular level of control over which IPs a process connects to.
I definitely do not want a process to connect to any Tracking system, e.g. Google, while maintaining connections to the APIs of the process.

It would be nice to be able to select and copy the text on the alert, i.e. to do a lookup on the remote IP address.

In case anyone else runs into this, simply removing the installed application isn't enough. I was running into strange problems in which I could access websites via my browser, but curl wasn't working in my Terminal. Running the uninstall script fixed these problems.

I just tried installing LuLu and it caused VS Code to stop working completely even after allowing all connections.

Code opens up but it hangs not loading any file/project and with no button working. The only way to closing it is force quitting it.

I don't know if it's a known issue but uninstalling LuLu make it working again.

Running macOS High Sierra 10.13.3 Beta build 17D46a.

on macOS 10.13.2

Adobe apps won't finish launching, hang until going offline or killing lulu daemon

On a side-note, i noticed that sometimes there is a huge delay between an unlisted process connecting to the internet and lulu noticing that and offering to allow the connection (noticed that when using wget)

every time i click on LuLu icon in the top bar and then on Rules in context menu, the rules window flash and then disappear immediately.
when i click on Rules again, the rules window opens normally and i am presented with a diagnostic popup.
after this i can open rules without a crash
however after some (unmessurred) time, without OS restart, the same thing happens again.

The 0.9.2 changelog claims 10.9 is supported, but the homepage and configure.sh check against 10.12.