5 ms·
Perhaps if Apple would let us self-sign drivers on our computers, we wouldn't need to disable SIP. Security that does not allow the actual use of the computer
by protomyth 7y ago
Perhaps if Apple would let us self-sign drivers on our computers, we wouldn't need to disable SIP. Security that does not allow the actual use of the computer gets disabled.
- EricE 7y agoExactly. Apple still hasn't come to terms with balancing security with functionality.
- dreamcompiler 7y agoYes, 100% this. SIP is badly designed because it's a global hammer like root. As such, it prevents power users from doing quite legitimate things with their computers and so we have to turn it off. SIP should work like sudo, not like meta-root.
- GeekyBear 7y agoYou can whitelist a kext. https://eclecticlight.co/2019/06/01/how-to-bypass-mojave-10-14-5s-new-kext-security/amp/ https://eclecticlight.co/2019/06/01/how-to-bypass-mojave-10-...
- saagarjha 7y agoI'm fairly sure this only applies to KEXTs that are signed but not notarized.