C++ Build Wrapper Fails Running On MacOS Ventura With SIP Enabled

[scmbuildguy (Mark Bretl)]

Must-share information (formatted with Markdown):

• SonarQube Enterprise 10.3, with the C++ Build Wrapper
• Execute C++ build wrapper on MacOS Ventura with System Integrity Protection SIP enabled
• what have you tried so far to achieve this:

• REPRO STEPS:

• Download latest build-wrapper-macosx-x86 and unzip it somewhere like ~/test_build_wrapper
• Run following command from: ~/test_build_wrapper/build-wrapper-macosx-x86/build-wrapper-macosx-x86 --out-dir /tmp/ make {}

ACTUAL RESULTS:

• make command gets killed by the OS

Build wrapper is trying to make copies of binaries from /usr/bin which includes make into /tmp but because System Integrity Protection (SIP) is enabled the system kills make when it tries running.

[mpaladin (Massimo Paladin)]

Hi @scmbuildguy ,

thank you for the detailed report, I am sending you a private message where you can share the build-wrapper output files, the .log and the .json.

[scmbuildguy (Mark Bretl)]

Thank you @mpaladin for your assistance. After some debugging and upgrading of the build wrapper and CLI, we were able to narrow it down to needing to allow (apply an exception) the build wrapper to execute from the /tmp directory when SIP is enabled on the system. This issue is now resolved.

Best regards,

Mark