7 ms·

There has been a very nice trend for a number of projects to support a <config_file>.d directory to which local modifications can be added. Current macOS (and

There has been a very nice trend for a number of projects to support a <config_file>.d directory to which local modifications can be added. Current macOS (and Debian >=11) has a non-standard sshd_config modification that does "Include /etc/ssh/sshd_config.d/*". Although placement early in the config file means some things cannot be overridden. Current "sudo" on macOS also supports this via "#includedir /private/etc/sudoers.d". (the # has been swapped for @ in upstream sudo). This neatly sidesteps the need to diff / re-apply changes on a SW update.

GekkePrutser 4y ago
This is not always an option, like you say it depends on the cooperation of the base config files (having the include and in the right place) and the tools used. It won't work foor all cases either. I just want to have the ability to make modifications and sign or bless them somehow with a system admin key. Root is not enough, for understanable reasons. What is possible is to modify offline (through recovery) and then 'bless' my changes. But this reverts after every reboot. There should be a toolchain where I can make legitimate modifications in a secure manner to system files. Like every other OS has. There should be some kind of user key to sign modifications with. Apple has just ignored this whole toolchain and replaced it with a "just trust us" blanket.