Re:Epic Games Launcher appears to collect Steam friends and ...
by Wowfunhappy on Friday March 15, 2019 @09:09AM
(#19399316)
> I technically believe they can, but they would have to make the user jump through some very unreasonable steps (reboot into a maintenance mode and disable integrity protection).
Just confirming this is accurate. SIP wouldn't need to be disabled completely, just the blocking of unsigned kexts. (Apple allows you to selectively enable and disable pieces of SIP).
I don't think this would be so wholly unreasonable. The types of users installing third party video cards in their Macs are the types of users who should know how to do this. At the cost of their security, you could argue, but of course you still have normal Unix root restrictions to protect you there, as long as you're savvy enough to not grant such permissions to any random software.
Just confirming this is accurate. SIP wouldn't need to be disabled completely, just the blocking of unsigned kexts. (Apple allows you to selectively enable and disable pieces of SIP).
I don't think this would be so wholly unreasonable. The types of users installing third party video cards in their Macs are the types of users who should know how to do this. At the cost of their security, you could argue, but of course you still have normal Unix root restrictions to protect you there, as long as you're savvy enough to not grant such permissions to any random software.