<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Aug 28, 2020, at 3:47 PM, Jed Brown <<a href="mailto:jed@jedbrown.org" class="">jed@jedbrown.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">"Hapla Vaclav" <<a href="mailto:vaclav.hapla@erdw.ethz.ch" class="">vaclav.hapla@erdw.ethz.ch</a>> writes:<br class=""><br class=""><blockquote type="cite" class="">On MacOS, maybe you also have lots of firewall popups appearing/disappearing when running tests like<br class=""> Do you want the application "ex29" to accept incoming network connections?<br class=""></blockquote><br class="">Is there a way to express that the application does not need (should not accept) incoming connections?<br class=""></div></div></blockquote><div><br class=""></div><div> Yes, this also seems to work:</div><div><br class=""></div><div>sudo $$FW --block $$APP</div><div><br class=""></div><div>instead of </div><div><br class=""></div><div>sudo $$FW --unblock $$APP</div><div><br class=""></div><div>The parallel program still runs correctly to conclusion without the popup. </div><div><br class=""></div><div> When I run in the debugger the popup doesn't come up until after I pass the break point for listen. </div><div><br class=""></div><div> The program has an undocumented option -a <listen or accept> when you run with </div><div><br class=""></div><div><div style="margin: 0px; font-stretch: normal; font-size: 14px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">sudo /usr/libexec/ApplicationFirewall/socketfilterfw -d -a accept</span></div></div><div><br class=""></div>it prints <span style="font-family: Menlo; font-size: 14px;" class="">ASKWHENACCEPT</span><span style="font-family: Menlo; font-size: 14px;" class=""> which seems to indicate it will delay the popup until an accept is called but I can't confirm this because the debugger never stops in accept on one process but the popup still comes up so this argument may not work as I would expect.</span></div><div><font face="Menlo" class=""><span style="font-size: 14px;" class=""><br class=""></span></font></div><div>There are strings in socketfilterfw</div><div><br class=""></div><div>AKSWHENLISTEN</div><div><div style="margin: 0px; font-stretch: normal; font-size: 14px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">ASKWHENACCEPT </span></div><div style="margin: 0px; font-stretch: normal; font-size: 14px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">ASKWHENCONNECTOUT </span></div><div style="margin: 0px; font-stretch: normal; font-size: 14px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">TRUSTEDAPPS </span></div><div style="margin: 0px; font-stretch: normal; font-size: 14px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">LOCALONLYAPP </span></div><div style="margin: 0px; font-stretch: normal; font-size: 14px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div></div><div><font face="Menlo" class=""><span style="font-size: 14px;" class="">The local only app is intriguing</span></font></div><div><font face="Menlo" class=""><span style="font-size: 14px;" class=""><br class=""></span></font></div><div><br class=""></div><div><blockquote type="cite" class=""><div class=""><div class=""><br class="">Normalizing sudo during build/testing seems really bad.<br class=""></div></div></blockquote></div><br class=""></div></body></html>