News for hackers. Stuff that matters.

A comment on Use macOS Recovery on a Mac with Apple silicon. Parent comment

Re:Use macOS Recovery on a Mac with Apple silicon by lathiat on Wednesday November 18, 2020 @11:59PM (#25146387)
It removes some specific types of security, but System Integrity Protection is a "runtime" protection on OSX. It disables access to various files/etc even as root unless in the right context.

So it seems unfortunate to have to lower the level of runtime security for OSX, in order to enable booting unsigned software. As they shouldn't be strictly related.

[ Parent | on HN ]
Re:Use macOS Recovery on a Mac with Apple silicon by sedatk on Thursday November 19, 2020 @10:14PM (#25157014)
My understanding is that if boot security cannot be established, it's impossible to assert runtime security either. Otherwise, a compromised code in the boot process can also alter how SIP behaves, essentially invalidating its security function.
[ Parent | on HN ]