generate_dump, exception_port_tool: set SecTaskAccess allowed

tools/mac/exception_port_tool.ad

 // Copyright 2014 The Crashpad Authors. All rights reserved.
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
 // You may obtain a copy of the License at
 //
 //     http://www.apache.org/licenses/LICENSE-2.0
 //
 // Unless required by applicable law or agreed to in writing, software
 // distributed under the License is distributed on an "AS IS" BASIS,
@@ skipping 74 matching lines @@
 handles, but by comparing them to the port values for known bootstrap services,
 it is possible to verify that they are set as intended.
 
 *-p*, *--pid*='PID'::
 For operations on the task target, including *--set-handler* with 'TARGET' set
 to *task*, *--show-task*, and *--show-new-task*, operates on the task associated
 with process id 'PID' instead of the current task associated with the tool. When
 this option is supplied, 'COMMAND' must not be specified.
 +
 This option uses +task_for_pid()+ to access the process’ task port. This
-operation may be restricted to use by the superuser or processes permitted by
-taskgated(8). Consequently, this program must normally be invoked by root to use
-this option. It is possible to install this program as a setuid root executable
-to overcome this limitation.
+operation may be restricted to use by the superuser, executables signed by an
+authority trusted by the system, and processes otherwise permitted by
+taskgated(8). Consequently, this program must normally either be signed or be
+invoked by root to use this option. It is possible to install this program as a
+setuid root executable to overcome this limitation.
 
 *-h*, *--show-host*::
 Shows the original host exception ports before making any changes requested by
 *--set-handler*. This option is restricted to the superuser.
 
 *-t*, *--show-task*::
 Shows the original task exception ports before making any changes requested by
 *--set-handler*.
 
 *--show-thread*::
@@ skipping 69 matching lines @@
 
 *127*::
 The program specified by 'COMMAND' could not be found.
 
 == See Also
 
 catch_exception_tool(1),
 on_demand_service_tool(1)
 
 include::../man_footer.ad[]