Processes getting wedged in "U" (uninterruptible wait) state after Security Update 2020-003

[Prokash Sinha]

First, I'm not sure how they are parsing . I see -sp, but the help is
showing -ps. Here is a link for this
---https://www.manpagez.com/man/8/taskgated/

You know that taskgated is a daemon launched by launchctl service -
which more like crond. Now comes the - task_for_pid () functionality.
>From 10.14 Apple did restrict accesses to XPC ports, which is the core
IPC on darwin. Basically any program tries to access task_for_pid()
will fail from that version onward, but in this case SIP is disabled
the booting from a different image ( internally). ___ So I think Apple
made a mistake while they were pushing out the beta. It's not unusual.
I've seen many times.

Catalina ( 10.15.N) will have more restrictions, 10.16 will have
different 3rd party supports ( kext, kernel pseudo drivers will not be
loaded, unless they allow, based on specific notarization - yet to be
seen ).

So if your machines are being used ( or a part of some infrastructure
) by many people, backup/downtime/migration/etc seems to be logical
path.

~pro

On Fri, May 29, 2020 at 5:44 AM Greg Earle <earle at isolar.dyndns.org> wrote:
>
> On 29 May 2020, at 4:47, Franco Vaccari wrote:
>
> > I would try other options before reinstalling the system, who knows,
> > reinstalling the developer tools, restarting with shift to clean
> > caches, reinstalling the security update, but ok, maybe reinstalling
> > everything from backup may be the easiest…
> >
> > Let us know how it went…
>
> Just to summarize the (apparent) solution for the list:
>
> It looks like Security Update 2020-003 changed the "taskgated" plist
> file
>
> /System/Library/LaunchDaemons/com.apple.taskgated.plist
>
> It added a single line with a new "-sp" switch:
>
> --
> whdmac:~ root# diff -rC 3
> /System/Library/LaunchDaemons/*com.apple.taskgated.plist*
> ***
> /System/Library/LaunchDaemons/DO_NOT_USE_com.apple.taskgated.plist_BAD  2020-04-16
> 21:28:38.000000000 -0700
> --- /System/Library/LaunchDaemons/com.apple.taskgated.plist     2019-04-14
> 18:58:56.000000000 -0700
> ***************
> *** 19,25 ****
>         <key>ProgramArguments</key>
>         <array>
>                 <string>/usr/libexec/taskgated</string>
> -               <string>-sp</string>
>         </array>
>    </dict>
>    </plist>
> --- 19,24 ----
> --
>
> The trouble is, "taskgated" does not seem to support "-sp":
>
> --
> whdmac:/ root# /usr/libexec/taskgated -sp
> taskgated: invalid option -- s
> Usage: taskgated [-ps] [-t seconds] [-i pid]
> --
>
> So, I don't understand why Apple added this switch.
>
> I also don't understand why everyone who installed this Security Update
> has not also been affected by this?!?
>
> Anyway, I removed the "-sp" line, rebooted, and now everything works
> again - "taskgated" is running and isn't exiting anymore, my Postgres
> server is running happily, and my MacPorts binaries are running without
> wedging.
>
> Apologies for the slightly off-topic thread ...
>
>                 - Greg