vetkit.macos.entitlements.code-injection
An entitlements file weakens the hardened runtime against code injection (disable-library-validation or allow-dyld-environment-variables). Other code can be loaded into the process and inherit its privileges and TCC permissions.
Last updated:
Suite: Security
regex
An entitlements file weakens the hardened runtime against code injection (disable-library-validation or allow-dyld-environment-variables). Other code can be loaded into the process and inherit its privileges and TCC permissions.
Category: SECURITY · Engine rule severity: WARNING
How to fix it
Remove the entitlement; if plug-ins must load, sign them with the same team ID instead of disabling library validation.
References
Source: packages/engine/rules/sast/mobile.yml.
Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.