gpg-agent Killed by Cylance AV during message signing
Reported by steve | February 1st, 2016 @ 03:51 PM | in 2.2.0 (closed)
This bug documents a problem with the Cylance AV Solution.
User report
GPGMail 2.6b2
OS X 10.11.1
I am currently using Cylance for threat detection on Mac and when using GPG Tools to sign outgoing messages, Cylance kills the gpg-agent due to "Exploit Attempt" specifically Stack Pivoting.
ADDED PROCESS NAME PROCESS ID TYPE ACTION USER NAME
11/06/15 9:36 AM /usr/local/MacGPG2/bin/gpg-agent 50022 Stack Pivot Terminated ghuff
11/06/15 9:36 AM /usr/local/MacGPG2/bin/gpg-agent 50021 Stack Pivot Terminated ghuff
11/05/15 8:29 AM /usr/local/MacGPG2/bin/gpg-agent 47163 Stack Pivot Terminated ghuff
11/05/15 8:29 AM /usr/local/MacGPG2/bin/gpg-agent 44646 Stack Pivot Terminated ghuff
Workaround
- uninstall GPGTools
- install homebrew
- brew install gpg2
- re-install GPGTools but use "Customized install" and de-select MacGPG2
Since with homebrew, this problem is no longer happening, the issue is related to GPGTools MacGPG2.
Comments and changes to this ticket
-
-
steve June 19th, 2017 @ 06:57 PM
- State changed from “new” to “wontfix”
- Tag cleared.
- Milestone set to “2.2.0”
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create new ticket
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
Luke Le
steve