News for hackers. Stuff that matters.

A comment on Introducing the next generation of Mac. Parent comment

Re:Introducing the next generation of Mac by Asmod4n on Wednesday November 11, 2020 @02:39AM (#25056302)
Can’t find anything in both documents which allows booting of non Apple signed Software. The only thing I See there is something like SecureBoot on PCs, where Apple would need to sign your boot loader in order to be able to boot it.
[ Parent | on HN ]
Re:Introducing the next generation of Mac by my123 on Wednesday November 11, 2020 @07:26AM (#25057765)
--permissive-security is the setting that you want. You are then able to enroll hashes of unsigned kernels with kmutil.
[ Parent | on HN ]
Re:Introducing the next generation of Mac by Asmod4n on Wednesday November 11, 2020 @09:25AM (#25058629)
Kmutil is only there to load kernel extensions? Or did that change with Big Sur?
[ Parent | on HN ]
Re:Introducing the next generation of Mac by my123 on Wednesday November 11, 2020 @10:29AM (#25059124)
It changed. You use kmutil create to create the artifacts and add the hash to the Secure Boot policy. (--help at https://pastebin.ubuntu.com/p/mN3Z2kfJWy/, no manpage)
[ Parent | on HN ]