3 ms·

> Once you need to be in the apple developer program to build and run from source or something, that’ll be a legitimate nightmare. But we’re nowhere near that y

> Once you need to be in the apple developer program to build and run from source or something, that’ll be a legitimate nightmare. But we’re nowhere near that yet. This is the case for building and running things with restricted entitlements and system extensions. Unless you disable system integrity protection entirely, which locks you out of your purchased App Store software, DRM content, etc.

adastra22 2y ago
You can no longer disable system integrity protection.
- NotPractical 2y ago
  Source?
  - adastra22 2y ago
    The release notes for Sequoia.
    - sbuk 2y ago
      Nope. Not the enterprise release notes or the security content notes either.
      - adastra22 2y ago
        What I'm referencing is that they removed `spctl --master-disable`. This was referenced in release notes that I read upon upgrading, and testing it on my own system confirms it is gone. Looks like there might be a way of achieving the same thing through the GUI? https://www.reddit.com/r/MacOSBeta/comments/1e2xlcg/disabling_gatekeeper_on_macos_sequoia_beta_3_has/ https://www.reddit.com/r/MacOSBeta/comments/1e2xlcg/disablin...
        NotPractical 2y ago
        That's Gatekeeper, not System Integrity Protection. You can disable SIP with `csrutil` by rebooting into the macOS recovery environment.
- pcwalton 2y ago
  You can [1]. [1]: https://www.reddit.com/r/hackintosh/comments/1fh5wez/cant_disable_sip_in_sequoia/ https://www.reddit.com/r/hackintosh/comments/1fh5wez/cant_di...
dur-randir 2y ago
>which locks you out of your purchased App Store software, DRM content Also false. But Apple's glad you believe in that.
- skrrtww 2y ago
  I was mistaken; I was conflating Permissive Security with SIP. Permissive Security does have those limitations.
- NotPractical 2y ago
  It does lock you out of iOS apps, Apple Pay, and 4K streaming of DRM content [1]. But that's not so bad I suppose. [1] https://github.com/cormiertyshawn895/RecordingIndicatorUtility?tab=readme-ov-file#troubleshooting-tips https://github.com/cormiertyshawn895/RecordingIndicatorUtili...

adastra22 2y ago

You can no longer disable system integrity protection.

NotPractical 2y ago
Source?
- adastra22 2y ago
  The release notes for Sequoia.
  - sbuk 2y ago
    Nope. Not the enterprise release notes or the security content notes either.
    - adastra22 2y ago
      What I'm referencing is that they removed `spctl --master-disable`. This was referenced in release notes that I read upon upgrading, and testing it on my own system confirms it is gone. Looks like there might be a way of achieving the same thing through the GUI? https://www.reddit.com/r/MacOSBeta/comments/1e2xlcg/disabling_gatekeeper_on_macos_sequoia_beta_3_has/ https://www.reddit.com/r/MacOSBeta/comments/1e2xlcg/disablin...
      - NotPractical 2y ago
        That's Gatekeeper, not System Integrity Protection. You can disable SIP with `csrutil` by rebooting into the macOS recovery environment.
pcwalton 2y ago
You can [1]. [1]: https://www.reddit.com/r/hackintosh/comments/1fh5wez/cant_disable_sip_in_sequoia/ https://www.reddit.com/r/hackintosh/comments/1fh5wez/cant_di...

dur-randir 2y ago

>which locks you out of your purchased App Store software, DRM content Also false. But Apple's glad you believe in that.

skrrtww 2y ago
I was mistaken; I was conflating Permissive Security with SIP. Permissive Security does have those limitations.
NotPractical 2y ago
It does lock you out of iOS apps, Apple Pay, and 4K streaming of DRM content [1]. But that's not so bad I suppose. [1] https://github.com/cormiertyshawn895/RecordingIndicatorUtility?tab=readme-ov-file#troubleshooting-tips https://github.com/cormiertyshawn895/RecordingIndicatorUtili...