3 ms·
Some useful security improvements, for example OS files now sit on a different read-only volume from all the users files and programs, making it more difficult
by SkyMarshal 7y ago
Some useful security improvements, for example OS files now sit on a different read-only volume from all the users files and programs, making it more difficult to insert worms, Trojans, rootkits and other things that can compromise the actual OS. And all apps installed on the Mac are now checked not just that they’re trusted, but for known security vulnerabilities too.
To the extent businesses care about reducing losses from cyber attacks, that’s probably useful.
- ghostpepper 7y agoHow does moving system files to a read-only volume provide any additional protection on top of SIP, which prevents unsigned processes from writing to system files? https://support.apple.com/en-us/HT204899 https://support.apple.com/en-us/HT204899
- J5892 7y agoI'm not sure, but I believe Chrome's /var symlink bug would have been prevented by that.
- pram 7y agoSIP had numerous exploits over the years, basically. The new volume provides additional isolation and utilizes native mechanisms in APFS to make it transparent to the user space. 'Defense in depth'