Re:Notarizing Your App Before Distribution
by auslander on Monday April 08, 2019 @10:15PM
(#19611124)
You can have partially enabled SIP. With CSR = 0x01, SIP is fully enabled except kext signing, more secure then disabled SIP.
[ Parent
| on HN ]
Re:Notarizing Your App Before Distribution
by Wowfunhappy on Tuesday April 09, 2019 @09:16AM
(#19614233)
I mean, if you want SIP, you can leave it fully enabled and load all custom kernel extensions with Clover, as I mentioned.
As I see it, if you're the kind of user who's installing Hackintosh, you're also probably savvy enough to not grant root permission to just any software. I want to have full control over my computer.
Re:Notarizing Your App Before Distribution
by saagarjha on Tuesday April 09, 2019 @02:40AM
(#19612344)
Selectively disabling parts of SIP is unsupported, FYI
Re:Notarizing Your App Before Distribution
by auslander on Tuesday April 09, 2019 @03:16AM
(#19612487)
What do you mean? You can always check: 'csrutil status'. I have all items enabled except kext signing.
Re:Notarizing Your App Before Distribution
by saagarjha on Tuesday April 09, 2019 @03:30AM
(#19612538)
Does csrutil status not give you the "This is an unsupported configuration, likely to break in the future and leave your machine in an unknown state." warning?
Re:Notarizing Your App Before Distribution
by auslander on Tuesday April 09, 2019 @03:47AM
(#19612602)
Warning, not error. And it shows the rest of protections enabled, good enough for me.
Re:Notarizing Your App Before Distribution
by saagarjha on Tuesday April 09, 2019 @04:03AM
(#19612663)
I guess if you’re willing to live dangerously it can’t hurt :)
Re:Notarizing Your App Before Distribution
by auslander on Tuesday April 09, 2019 @05:32AM
(#19613023)
It is hackintosh. All guides tell you to disable SIP, so I live rather cautiously :)