macOS kernel return 35 (KERN_INVALID

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The supplied argument is not the host security port required to assert the requested privilege.

Could be also:
Constant	Type	OS
ippStsDoubleSize	Intel Ipp Status	Any
EDEADLK	errno	Linux
EAGAIN	errno	Mac
ENOMSG	errno	Solaris
FAT_FILE_SYSTEM	BugCheck Code	Windows

Previous	Next
KERN_INVALID_MEMORY_CONTROL	KERN_NOT_DEPRESSED

KERN_INVALID_SECURITY

Not a generic access-denied result

KERN_INVALID_SECURITY is a specific Mach capability error. XNU defines it for a request that needs a host security port but receives another argument. The issue is the identity and authority of the supplied port, not merely a missing user permission bit.

This differs from KERN_DENIED, which represents a policy denial after the request reaches the applicable security decision. Here, the operation lacks the required security interface before that decision can be made.

What to inspect

Log the API boundary where the security port was expected and the object actually provided.
Distinguish host, host-privileged, host-security, task, and service ports in wrapper types and diagnostics.
Review whether a privilege-brokering service intentionally withheld the required capability.
Do not substitute a port by numeric value or assume that a valid host port grants host-security authority.

References

Looking for a different code? Search another status or error code.