4 ms·
> The safest kernel is the one that cannot be touched at runtime. Can you expand what you mean here? Because depending on the application you are running, you
by Xunjin 2y ago
> The safest kernel is the one that cannot be touched at runtime.
Can you expand what you mean here? Because depending on the application you are running, you will need at least talk with some APIs to get privileged access?
- odo1242 2y agoYeah, Apple doesn’t allow any user code to run in kernel mode without significant hoops (the kernel is code signed) and tries to provide a user space API (e.g. DriverKit) as an alternative for the missing functionality. Some things (FUSE) are still annoying though.
- duskwuff 2y ago> Some things (FUSE) are still annoying though. That should get much easier in macOS Sequoia with FSKit. https://developer.apple.com/documentation/fskit/ https://developer.apple.com/documentation/fskit/
- Agingcoder 2y agoBeing allowed to talk to the kernel to get info and running with the same privileges ( basically being able to read / write any memory ) is different.