News for hackers. Stuff that matters.

A comment on macOS Containers v0.0.1. Parent comment

Re:macOS Containers v0.0.1 by diogenes4 on Tuesday September 26, 2023 @12:44PM (#37661967)
> SIP means not messing with the system files, enumerated thusly: /System.

...and all its children, which is effectively the entire operating system

> Enumerating what I do want an app to access is handled by Gatekeeper.

Gatekeeper is not capable of this.

[ Parent | on HN ]
Re:macOS Containers v0.0.1 by jmbwell on Tuesday September 26, 2023 @06:18PM (#37666522)
It's among the things Gatekeeper does, isn't it? As configured with PPPC?
[ Parent | on HN ]