[OpenMP] Cannot ship libomp.dylib on a sandboxed macOS app

[bvoq]

My application runs fine with XCode and a self linked version of libomp.dylib (openmp) 17.0.6.
However, as soon as I enable the Sandbox on my macOS application the application throws (most likely because shared memory is unavailable).

Here is the exact error:

OMP: Error #179: Function Can't open TEMP failed:
OMP: System error #1: Operation not permitted
Assertion failure at kmp_runtime.cpp(6891): temp_reg_status_file_name.
OMP: Error #13: Assertion failure at kmp_runtime.cpp(6891).

Referencing this part of the code: https://github.com/llvm/llvm-project/blob/llvmorg-17.0.6/openmp/runtime/src/kmp_runtime.cpp#L6884-L6906

Has anyone tried shipping openmp with sandbox enabled and has found a workaround for this?

[llvmbot]

@llvm/issue-subscribers-openmp

Author: Kevin De Keyser (bvoq)

My application runs fine with XCode and a self linked version of libomp.dylib (openmp) 17.0.6. However, as soon as I enable the Sandbox on my macOS application the application throws (most likely because shared memory is unavailable).

Here is the exact error:

OMP: Error #<!-- -->179: Function Can't open TEMP failed:
OMP: System error #<!-- -->1: Operation not permitted
Assertion failure at kmp_runtime.cpp(6891): temp_reg_status_file_name.
OMP: Error #<!-- -->13: Assertion failure at kmp_runtime.cpp(6891).

Referencing this part of the code: https://github.com/llvm/llvm-project/blob/llvmorg-17.0.6/openmp/runtime/src/kmp_runtime.cpp#L6884-L6906

Has anyone tried shipping openmp with sandbox enabled and has found a workaround for this?

<img width="571" alt="image" src="https://github.com/llvm/llvm-project/assets/3169217/3c27dd91-cb22-427a-91f2-6de75356d803">

[bvoq]

For what it's worth, enabling hardened runtime support does work except for the Executable Memory Protection:

[shiltian]

Probably we need to use some macOS specific APIs to create temp file here?