News for hackers. Stuff that matters.
Re:Notarizing Your App Before Distribution by george_perez on Monday April 08, 2019 @06:58PM (#19609946)
Kernel extensions will also need to be notarized, so Hackintosh doesn't seem very likely.
Re:Notarizing Your App Before Distribution by Wowfunhappy on Monday April 08, 2019 @07:05PM (#19610010)
Hackintosh user here: this has literally no impact on anything.

If you turn off SIP, you can run unsigned kernel extensions without issue, both on a Hackintosh and on a real Mac†.

If you're a Hackintosh user, but for some strange reason you want to leave SIP enabled, you can inject unsigned kernel extensions via the Clover bootloader. (I think you may need to temporarily disable SIP during setup or something like that, I don't fully remember. I just turn SIP off.)

† I actually find this much easier than Windows, which is a royal pain in the neck if you want to install unsigned drivers.

Re:Notarizing Your App Before Distribution by auslander on Monday April 08, 2019 @10:15PM (#19611124)
You can have partially enabled SIP. With CSR = 0x01, SIP is fully enabled except kext signing, more secure then disabled SIP.
Re:Notarizing Your App Before Distribution by Wowfunhappy on Tuesday April 09, 2019 @09:16AM (#19614233)
I mean, if you want SIP, you can leave it fully enabled and load all custom kernel extensions with Clover, as I mentioned.

As I see it, if you're the kind of user who's installing Hackintosh, you're also probably savvy enough to not grant root permission to just any software. I want to have full control over my computer.

Re:Notarizing Your App Before Distribution by saagarjha on Tuesday April 09, 2019 @02:40AM (#19612344)
Selectively disabling parts of SIP is unsupported, FYI
Re:Notarizing Your App Before Distribution by auslander on Tuesday April 09, 2019 @03:16AM (#19612487)
What do you mean? You can always check: 'csrutil status'. I have all items enabled except kext signing.
Re:Notarizing Your App Before Distribution by saagarjha on Tuesday April 09, 2019 @03:30AM (#19612538)
Does csrutil status not give you the "This is an unsupported configuration, likely to break in the future and leave your machine in an unknown state." warning?
Re:Notarizing Your App Before Distribution by auslander on Tuesday April 09, 2019 @03:47AM (#19612602)
Warning, not error. And it shows the rest of protections enabled, good enough for me.
Re:Notarizing Your App Before Distribution by saagarjha on Tuesday April 09, 2019 @04:03AM (#19612663)
I guess if you’re willing to live dangerously it can’t hurt :)
Re:Notarizing Your App Before Distribution by auslander on Tuesday April 09, 2019 @05:32AM (#19613023)
It is hackintosh. All guides tell you to disable SIP, so I live rather cautiously :)
Re:Notarizing Your App Before Distribution by anoncake on Tuesday April 09, 2019 @07:45AM (#19613623)
So are Hackintoshs?
Re:Notarizing Your App Before Distribution by saagarjha on Tuesday April 09, 2019 @07:41PM (#19620158)
Apple shames you for doing that instead of telling you it's unsupported.
Re:Notarizing Your App Before Distribution by coldcat on Monday April 08, 2019 @08:01PM (#19610372)
Kernel extension already require a special developer certificate. You should explain to Apple what you need it for, then if your are accepted by Apple you get a new signing certificate including kernel Extensions. After that you can do "anything". With the notarized every app will be needed to be scan by Apple before. It's something a lot more painful than Microsoft Windows Defender which do the same (first launch of unknown app) for every app and maintained a worldwide database of signature of authorised apps.
Re:Notarizing Your App Before Distribution by nutjob2 on Monday April 08, 2019 @07:32PM (#19610204)
Hackintoshes are not affected any protection Apple applies, they just work round it by modifying or re-implementing the software.
Re:Notarizing Your App Before Distribution by vbezhenar on Monday April 08, 2019 @07:06PM (#19610021)
Why? Just NOP that check. If you have control over your hardware, nobody can stop you.