News for hackers. Stuff that matters.

A comment on /story/34802730. Parent comment

Re: by alwaysbeconsing on Wednesday February 15, 2023 @07:59PM (#34813455)
Well, they can't make it a simple checkbox or everyone would just check it (see how many people already download Developer Betas of the OSes every summer). But if you really do want this, you can have it: disable SIP, done.
[ Parent | on HN ]
Re: by flohofwoe on Thursday February 16, 2023 @07:57AM (#34818077)
The problem with disabling SIP is that (AFAIK) it also does a lot of useful/important things (for instance protecting the system folders).

Simply disabling it globally isn't really a good solution to the problem. Neither signed nor unsigned, notarized or un-notarized apps should ever be allowed to write to those folders, no matter if SIP is on or off.

OTH preventing an app to read/write subdirectories in the user's home folder is definitely not a useful feature.

[ Parent | on HN ]