5 ms·
Apple is doing a lot better nowadays, but it's still not perfect though, for example: you can't delete iTunes on MacOS.
by LeonM 8y ago
Apple is doing a lot better nowadays, but it's still not perfect though, for example: you can't delete iTunes on MacOS.
- slumber86 8y agoRight, but isn't a third party app, is kinda a part of the OS, like deleting Safari.
- xoa 8y agoYes, you can. You can also recompile the kernel with new options, or do whatever else. This has been misstated repeatedly in this thread, but macOS simply is not backed by a trusted hardware chain, end of story. It's not iOS. With SIP Apple has effectively implemented something like a more granular system immutable flag with kern.securelevel set to 1 like it was back until 10.3 or so (can't remember exactly when they changed it to 0), but just as you could drop down to single user mode back then SIP can also be disabled or modified at will. Having the restricted flag set on a bunch of core system .app bundles under macOS and a sane default policy is simply not the same thing as "you can't get rid of it". And I do think Apple should be legally required to provide decent built-in support for an owner controlled trust chain, but I don't think mixing up "you need to really know and be sure of what you're doing" with "it's hard prevented outside of bugs" is helpful.