Is it possible to list running processes that are not signed or notarized?

Question

This would be interesting in general but also helpful in diagnosing the frequent appearance of MacOS error: -67062 in the Console.

Edit: in response to comments, the question is more specifically about trying to find out which processes are running that are NOT signed (or notarized).

Finding all running processes is trivial, but finding out whether their signed status seems to be tricky.

Does this answer your question? How to show all running processes on macOS/OS X? — jaume, Jul 28 '20 at 11:09
@jaume that question does not have answers showing if a process is from a signed app — mmmmmm, Jul 28 '20 at 14:59
@mmmmmm I'd say this question is about listing running processes, not about telling between "signed" and "unsigned" processes apart. Or do you think the question is in fact: "is it possible to *only* list running processes that are not signed or notarized"? — jaume, Jul 28 '20 at 17:37
I read it as the latter - other wise not signed or notarized would not be mentioned. — mmmmmm, Jul 28 '20 at 17:50
@jaume I've edited the question to clarify, thanks for looking. — shashin, Jul 29 '20 at 12:05
@mmmmmm - that is right, I'm after finding signed/notarized running processes. — shashin, Jul 29 '20 at 12:05

Graham Miln · Accepted Answer · 2020-07-29T16:51:43.513

4

You will need to write a short script to gather this information.

Obtaining a list of processes is possible with ps and code signatures of processes can be checked with codesign.

codesign

The codesign command can be passed process identifiers, pid. To verify the signatures of two running processes call:

/usr/bin/codesign -d -vvvv 279 422

The flags are:

-d for validation
-vvvv to increased verbosity
279 the first process identifier to check
422 the second process identifier to check

edited Jul 29 '20 at 16:51

answered Jul 29 '20 at 12:12

Graham Miln

43,776

1

Very helpful, thank you, a little shell script should manage this. – shashin Jul 30 '20 at 13:37

Is it possible to list running processes that are not signed or notarized?

1 Answers1

codesign