Re:macOS Containers v0.0.1
by johnmaguire on Tuesday September 26, 2023 @09:42AM
(#37659173)
I think the argument is that file permissions may not be applied as rigorously, with the assumption that SIP is in effect.
[ Parent
| on HN ]
Re:macOS Containers v0.0.1
by slonopotamus on Tuesday September 26, 2023 @09:43AM
(#37659204)
SIP won't save you from wrong file permissions.
And SIP doesn't defend you from editing files in /bin. They are guarded by the fact that root filesystem is mounted read-only.