4 ms·

At least two other security changes: - userspace filesystems: the nail on the coffin for kernel extensions. Now we won't need to run in "reduced security" to u

At least two other security changes: - userspace filesystems: the nail on the coffin for kernel extensions. Now we won't need to run in "reduced security" to use FUSE and that was the last kernel extension that remained popular. Probably kexts will be deprecated shortly - rapid security response - it seems also to include changes in Xprotect and mrt

dagmx 4y ago
Do you have any links on the userspace filesystems? There's a few things I'd like to develop in that regard without getting into kexts
- sharikous 4y ago
  There is that: https://threedots.ovh/blog/2022/06/quick-look-at-user-mode-file-systems-on-macos-ventura/ https://threedots.ovh/blog/2022/06/quick-look-at-user-mode-f... But userspace filesystems are already present in iOS so you can find some reverse engineered info on that (e.g. in Jonathan Levin's books)
  - dagmx 4y ago
    Thanks
    - my123 4y ago
      Note that UVFS is currently not exposed to third parties. For your own 3rd-party file systems, you'll still have to use a kernel extension for now. (or local NFS mount).
dochtman 4y ago
Very curious about userspace filesystems, would be awesome if there's finally a fast solution for this that's well-supported in the OS.
pxc 4y ago
> the nail on the coffin for kernel extensions The OpenZFS implementation on macOS also requires kernel extensions, and I don't suppose it can easily be ported to FUSE or that that would have desirable performance characteristics. Special kernel extensions are also required to get some basic functionality working on macOS these days, like disabling pointer acceleration.
- idle_zealot 4y ago
  > disabling pointer acceleration Could you point me to the kext that does that? I’ve been trying to find a way to disable it for ages.
  - EarthLaunch 4y ago
    Under Miscellaneous, Exactmouse Tool. https://steelseries.com/engine https://steelseries.com/engine This is what everyone uses. Mouse acceleration disable is a dealbreaker for me- I won’t update unless something supports it.
    - pxc 4y ago
      That no longer worked, the last few times I tried it. The only thing that works now are these drivers that implements a different type of pointing device (CursorSense and SteerMouse) from Plentycom: http://www.plentycom.jp/en/index.html http://www.plentycom.jp/en/index.html
- pjmlp 4y ago
  Too bad for them, Apple has already stated multiple times that the long term roadmap is that all third party stuff will only be available as userspace drivers. The plan being, each kext has one year timeframe to migrate to the new userspace API after its introduction, and the year thereafter the kernel API gets dropped from the new OS release.
  - deleted 4y ago
    [deleted]

dagmx 4y ago

Do you have any links on the userspace filesystems? There's a few things I'd like to develop in that regard without getting into kexts

sharikous 4y ago
There is that: https://threedots.ovh/blog/2022/06/quick-look-at-user-mode-file-systems-on-macos-ventura/ https://threedots.ovh/blog/2022/06/quick-look-at-user-mode-f... But userspace filesystems are already present in iOS so you can find some reverse engineered info on that (e.g. in Jonathan Levin's books)
- dagmx 4y ago
  Thanks
  - my123 4y ago
    Note that UVFS is currently not exposed to third parties. For your own 3rd-party file systems, you'll still have to use a kernel extension for now. (or local NFS mount).

dochtman 4y ago

Very curious about userspace filesystems, would be awesome if there's finally a fast solution for this that's well-supported in the OS.

pxc 4y ago

> the nail on the coffin for kernel extensions The OpenZFS implementation on macOS also requires kernel extensions, and I don't suppose it can easily be ported to FUSE or that that would have desirable performance characteristics. Special kernel extensions are also required to get some basic functionality working on macOS these days, like disabling pointer acceleration.

idle_zealot 4y ago
> disabling pointer acceleration Could you point me to the kext that does that? I’ve been trying to find a way to disable it for ages.
- EarthLaunch 4y ago
  Under Miscellaneous, Exactmouse Tool. https://steelseries.com/engine https://steelseries.com/engine This is what everyone uses. Mouse acceleration disable is a dealbreaker for me- I won’t update unless something supports it.
  - pxc 4y ago
    That no longer worked, the last few times I tried it. The only thing that works now are these drivers that implements a different type of pointing device (CursorSense and SteerMouse) from Plentycom: http://www.plentycom.jp/en/index.html http://www.plentycom.jp/en/index.html
pjmlp 4y ago
Too bad for them, Apple has already stated multiple times that the long term roadmap is that all third party stuff will only be available as userspace drivers. The plan being, each kext has one year timeframe to migrate to the new userspace API after its introduction, and the year thereafter the kernel API gets dropped from the new OS release.
- deleted 4y ago
  [deleted]