santad: Add /usr/lib/dyld to critical system binaries (#376)

dyld is also authorized by santad and a bad cache eviction plus trustd/ocspd not running can result in deadlock. Fixes #375, probably.
google · Jul 22, 2019 · bc82d79 · bc82d79
1 parent 545fa85
commit bc82d79
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/Source/santad/DataLayer/SNTRuleTable.m b/Source/santad/DataLayer/SNTRuleTable.m
@@ -41,7 +41,8 @@ @implementation SNTRuleTable
 
 - (NSArray *)criticalSystemBinaryPaths {
   return @[
-    @"/usr/libexec/trustd", @"/usr/sbin/securityd", @"/usr/libexec/xpcproxy", @"/usr/sbin/ocspd"
+    @"/usr/libexec/trustd", @"/usr/sbin/securityd", @"/usr/libexec/xpcproxy",
+    @"/usr/sbin/ocspd", @"/usr/lib/dyld"
   ];
 }