macOS Containers v0.0.1

Re:macOS Containers v0.0.1 by slonopotamus on Tuesday September 26, 2023 @07:18AM (#37657614)

What exactly attack vectors you think are possible against macOS without SIP but not possible against Linux?

[ Parent | on HN ]

Re:macOS Containers v0.0.1 by johnmaguire on Tuesday September 26, 2023 @09:42AM (#37659173)

I think the argument is that file permissions may not be applied as rigorously, with the assumption that SIP is in effect.

[ Parent | on HN ]

Re:macOS Containers v0.0.1 by slonopotamus on Tuesday September 26, 2023 @09:43AM (#37659204)

SIP won't save you from wrong file permissions.

And SIP doesn't defend you from editing files in /bin. They are guarded by the fact that root filesystem is mounted read-only.

[ Parent | on HN ]

Re:macOS Containers v0.0.1 by saagarjha on Tuesday September 26, 2023 @12:37PM (#37661866)

Entitlement stealing, for example.

[ Parent | on HN ]

Re:macOS Containers v0.0.1 by Klonoar on Tuesday September 26, 2023 @05:30PM (#37666058)

With SIP enabled it’s not possible to load arbitrary kernel extensions, for one - they must be signed.

[ Parent | on HN ]