Tag: kext

Secure Kernel Extension Loading in macOS High Sierra

Linus

0x00 Background Reference: Technical Note TN2459: Secure Kernel Extension Loading In macOS High Sierra, Apple introduced Secure Kernel Extension Loading (aka Kext User Consent) feature to require user confirmation before loading a signed kext. Note that this restriction only apply to valid signed kexts. Unsigned kexts would be taken care… Read moreSecure Kernel Extension Loading in macOS High Sierra

Kext to check SIP/Rootless status on El Capitan

Linus

About SIP/Rootless:  SIP/Rooless Internal in El Capitan In order to check the status of all security mechanisms provided by SIP/Rootless, a tiny little kext was built. WARNING: This kext is for testing purpose ONLY. Download: SIPCheck.command.zip Requirements: 1. OS X 10.11 for the SIP status check; bootargs flags check would be… Read moreKext to check SIP/Rootless status on El Capitan