[ZBX-19141] Zabbix server stopped cannot open IPC socket. Created: 2021 Mar 19 Updated: 2021 Mar 20 Resolved: 2021 Mar 20 |
|
| Status: | Closed |
| Project: | ZABBIX BUGS AND ISSUES |
| Component/s: | Server (S) |
| Affects Version/s: | 5.2.5 |
| Fix Version/s: | None |
| Type: | Problem report | Priority: | Trivial |
| Reporter: | Andrei Gushchin (Inactive) | Assignee: | Andrei Gushchin (Inactive) |
| Resolution: | Duplicate | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Attachments: |
|
||||||||
| Issue Links: |
|
||||||||
| Description |
|
Steps to reproduce: Result: Dll Injector For Mac < CONFIRMED >By dawn, Leo’s laptop was asleep. But somewhere in the quiet process list of his machine, a payload loaded by trickery at launch still whispered: Injected. But for his game mod? He found a different way—a shim library via DYLD_INSERT_LIBRARIES launched from a tiny launcher app, plus a local IPC socket to communicate at runtime. No runtime injection. Just clever bootstrapping. Right— task_for_pid() was locked down tighter than a bank vault. On modern macOS (12+), even with entitlements, you couldn’t just grab a task port unless the target process was complicit or you were root with SIP disabled. dll injector for mac Leo leaned back. His reflection in the dark screen looked tired but grinning. DYLD_INSERT_LIBRARIES=./payload.dylib ./target_app The terminal printed: Injected. By dawn, Leo’s laptop was asleep The problem, he’d come to understand, was philosophical. Windows treated DLL injection like a backdoor key—messy but expected. macOS, however, had evolved into a fortress. (SIP) chained the gates. Hardened Runtime wrapped the executables in armor. Notarization meant Apple had to personally approve every key before it worked. He saved his notes: “macOS injection is dead. Long live code injection via preload and entitlements.” He found a different way—a shim library via Permission denied. |
| Comments |
| Comment by Vladislavs Sokurenko [ 2021 Mar 19 ] |
|
Thank you for your report, closing as a duplicate of |