-
Notifications
You must be signed in to change notification settings - Fork 43
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Prohibited process locked SEB #294
Comments
This should be solved in SEB 3.2.x. We don't support older SEB versions. Please only file issues when you observe them in the latest SEB version. |
Note: If this issue still happens with SEB 3.2.5 or 3.3, then please search the according SEB log files for this line Also see this issue: #320 |
Another workaround to prevent this lock screens for "com.apple.WebKit.Networking" would be to disable the "Active" flag for the default preset prohibited process "Safari/WebKit Networking". This isn't preferable, as then students could use Safari or other WebKit-based browsers in the background to for example run some web-based screen sharing or video/audio conferencing tool. All of this is efficiently prevented with the AAC lockdown mode, that's why that would be the way to go forward in future. |
I also got this error, this is my log file:
And I got this image: |
This issue seems to finally be fixed in SEB 3.3.2. Please update, we don't recommend still using 3.2.5. |
@danschlet could you have a look please? Im going to have some exams on SEB really soon. Edit: This is my log file:
|
This seems to be an issue on your Mac, as we didn't get new similar reports yet. The improved logging in SEB 3.3.2 shows the error "Operation not permitted" when trying to terminate the offending WebKit process. The reason is likely because it's a system process. But the question is why SEB wants to terminate this process. In the logs before what you posted it should be mentioned. Are you using a Hackintosh (macOS on a Windows machine) or some other manipulation of macOS? Could even be a malware which manipulated your system. |
No, I have a Macbook Air, and I don't think I downloaded any malware as I always download through a package manager and check every thing I download thoroughly. Do you know any other ways to identify the root of this problem? |
As I said, post your full log file (log level debug necessary). Before the part that you posted should be the reason why SEB tried to terminate the WebKit process. Does your user have admin rights? Otherwise try it with a user which has admin rights. You can also boot your Mac in Safe Mode and try it again. |
Here's my full log file, almost everything before that are just seb terminating microsoft app helper: org.safeexambrowser.SafeExamBrowser 2024-02-19--19-09-16-368.log |
There is a process with the name "nsattributedstringagent Networking" and the bundle ID "com.apple.WebKit.Networking" running on your system, which SEB cannot terminate due to "Operation not permitted", which usually would happen when that process was started by another user (can be a system user, in my case there is a "nsattributedstringagent" process started by a user "_softwareupdate", which obviously is a system process). "com.apple.WebKit.Networking" is one of the preset default prohibited processes in SEB. If you switch this off in your settings ("active" property for this prohibited process needs to be disabled"), SEB would not attempt to terminate this process. But then WebKit-based tools and browsers (Safari, Safari Technology Preview etc.) could be potentially used for cheating. Another option is to use the AAC Assessment Mode instead of the default SEB lockdown (kiosk) mode. But I see you're using ANS, so they would need to change their settings. But again the question is why there is a "nsattributedstringagent Networking" process running on your Mac and also usually processes running under another user don't show their Bundle ID, therefore it should be safe for SEB to terminate all processes with the Bundle ID "com.apple.WebKit.Networking". So try to quit all applications before running the SEB exam or boot in Safe Mode and start only SEB. You can also try to create a new, separate user account on your Mac for exams and don't change significant system settings and don't install any third party tools which theoretically could cause such issues. |
Thank you so much for the help! It seems like the user "_softwareupdate" also starts the "nsattributedstringagent" process in my case. Base on your suggestion, I guess I should start my laptop in safe mode then. Again, thanks a lot for your help! |
Hi, user "_softwareupdate" also starts "nsattributedstringagent" process in my case, but (this is me trying to kill the process)
|
No, elevating privileges is not desired for SEB. The way to go is to use AAC Assessment Mode, then these processes don't have to be terminated. |
Could you guide me further on how to use AAC mode? I only need to click "prefer AAC" in the settings right? And if so, do I also have to check the DNS pre-pinning box? |
hi, i'm using 3.3.2 but this issue still happened. anyone can help, please???
|
In such cases search either the SEB for macOS manual or release notes. In release notes when searching for the text "AAC", you would have found: Added DNS pre-pinning when using AAC on macOS <12.1, according to new setting aacDnsPrePinning (Preferences / Security / Use AAC with DNS pre-pinning). SEB will then resolve all domains from settings Start URL and URL filter Allow rules before activating AAC (as in macOS <12.1 DNS lookup during AAC doesn't work). You can define allow rules and if you don't actually need URL filtering, deactivate it afterwards (Preferences / Network / Activate URL filtering) or deactivate single URL filter rules with its Active property. To ensure that DNS lookup works for your web application, you need to add all domains and subdomains as Allow filter rules (don't forget for example domains which are contacted for single-sign-on). Note: Without activating the setting aacDnsPrePinning (Preferences / Security / Use AAC with DNS pre-pinning), AAC will only be used on macOS Catalina 10.15.4 and >=10.15.6 and macOS Monterey 12.1 or newer (not on macOS Big Sur 11.0 - Monterey 12.0). If you want to enforce the use of AAC on all these systems, you either need to use the Use AAC with DNS pre-pinning setting or enforce that only macOS 12.1 or newer is used (Preferences / Security / Allow running from macOS version / Check full macOS version number / enter 12 for Major version number and 1 for Minor version number). |
If you need to support also older macOS versions than macOS 10.15 or AAC doesn't work for some of your students because they use macOS 11 Big Sur (for sure they must update to the latest macOS 11 minor version if they cannot/don't want to update to newer macOS versions!) and the pre-pinning feature is too complicated to set up for your web application (or you don't want to use AAC for other reasons):
|
Wait to ensure we are on the same page, can I tick "prefer AAC" in SEB settings as a student taking the test or do I need to be the examiner to do that? |
Only the examiner/exam administrator can change the settings of their exam. That's why we always point out that students should contact their exam provider/examiner, not us. We provide the software for free download without anybody having to register or getting a license. We often don't have an idea what exam system is used with SEB. So we're really not the right ones to ask when students have issues starting an exam. Our support is actually only meant for exam system administrators/providers/examiners/teachers which want to know how to correctly configure SEB... |
This should be fixed in SEB 3.3.3 for macOS. Please test and report if it works for you. |
We are having a digital exam today and experiencing a lot of different problems related to "Prohibited Process Locked SEB".
The problems seems to primarly be because Safari is being used because when they use Chrome or another web browser it works correct.
This happens on different versions om macOS and but the students are using SEB 2.1.4 and 2.3.2.
i will update the post if i get what os version and seb version the use and safari version
[](ur
![IMG_0146](https://user-images.githubusercontent.com/36742392/231416202-99613831-1118-47ef-93d6-a10f60c40524.jpg)
![IMG_0147](https://user-images.githubusercontent.com/36742392/231416213-0c1522d3-3da3-4b0a-b92a-4d28514bddaa.jpg)
![IMG_0148](https://user-images.githubusercontent.com/36742392/231416227-689b0a57-3902-4663-ae89-18c288f0cf99.jpg)
![IMG_0153](https://user-images.githubusercontent.com/36742392/231416239-fb5602bf-d03e-44f2-82ae-f989e71a72d0.jpg)
l)
The text was updated successfully, but these errors were encountered: