Request : Add 'Block kext'

Question

Request : Add 'Block kext'

dateno1 opened this issue a year ago · 24 comments

Please Add 'Block kext' like OC

I think It better then 'BlockSkywalk'

Example
Kext name : IOSkywalkFamily.kext (Path is not need)
Min Version : 11 (if not inputted 10.x or upper)
Max Version : 16 (if not inputted Min version~upper)
Enabled : Enabled/Disabled

It not only for 'IOSkywalkFamily.kext'

Can block 'IOSkywalkFamily.kext' for Broadcom WLan for Sonoma
Can block 'some of kext' for future update (Maybe MaxOS 15?)
Can block 'IO80211Family.kext' for Old WLan for new MacOS (Example : DW1520@Big Sur) (Block Internal 'IO80211Family.kext' and Add old 'IO80211Family.kext' to /efi/clover/kext

Answer 1 · 2023-12-10T00:30:01.000Z

previous such requests and discussions for reference:

Answer 2 · 2024-01-04T10:21:08.000Z

Could you try this : CloverX64-2024-01-04-10-59-02-0094e0c-jief.zip ?

Answer 3 · 2024-01-04T10:41:06.000Z

Will do once I'm back tomorrow. Would be great if it was possible again (currently, to block the Skywalk kext in macOS Sonoma to revive BCM Wi-Fi not just in OC but also in Clover)

Answer 4 · 2024-01-04T18:22:50.000Z

Looks lite it works for others. If it works for you, please close this issue.

Answer 5 · 2024-01-04T23:21:29.000Z

Will do once I'm back tomorrow. Would be great if it was possible again (currently, to block the Skywalk kext in macOS Sonoma to revive BCM Wi-Fi not just in OC but also in Clover)
It not only for Skywalk

It for All kext

Answer 6 · 2024-01-05T11:05:12.000Z

@dateno1 it wouldn't make sense for jief to issue a Clover binary which would block all kexts..

.. about to test

[EDIT] I now see what you mean. You need to quote and edit correctly and insert a line break before "It not only for Skywalk" so it doesn't end up in your quote of mine.

.. and you meant to say: "Procedure/ application is not only limited to Skywalk but can be applied to any kext" ;)

Answer 7 · 2024-01-05T11:36:35.000Z

@jief666 - two questions re. the edits in the kextsToPatch section, before I bug around too much (looked through Clover documentation but couldn't find clear data):

into the 'Name' field, do we insert com.apple.iokit.IOSkywalkFamily or IOSkywalkFamily?
'matchos' - which of these do you recommend, or even work (as per Clover Crate > About Patching Masks, I would go with a.):

a. 14.x
b. 14.x.xx
c. 14 (would only apply to 14.0?)
d. 14+ (if that works then it's not documented in EN in the usual places)
e. any of the above/ doesn't matter

?

Answer 8 · 2024-01-05T13:24:10.000Z

@jief666 : I'm wondering what you base "Looks lite it works for others" on - I don't see anybody who confirmed it's working. Here, Clover GUI freezes/ locks up with CloverX64-2024-01-04-10-59-02-0094e0c-jief.zip as soon as I hit any of my macOS icons, not just Sonoma but also Monterey, after which I can only reboot via Ctrl+Alt+Del. Clicking onto my Windows icon correctly chainloads the Windows bootloader.

That even happens with a restored config.plist without added kexttopatch entry, so it can't be that.

Naturally, I not just overwrote CloverX64.efi with yours, but also duplicated it, renamed the file clone to BOOTX64.efi and also overwrote BOOTX64.efi in EFI/boot.

To make sure there's no dependency mismatch, next I installed the latest Clover beta Clover_r5156.pkg from CircleCI (bd46eef), again replaced CloverX64.efi and BOOTX64.efi with your 0094e0c-jief - same thing .. :(

Needless to say, BCM kexts for Sonoma only in the appropriate/ dedicated /Volumes/EFI/EFI/CLOVER/kexts/14 folder

attached: preboot.log.zip

[UPDATE]: in the meantime I downloaded the latest generic Clover EFI for my chipset from Olarila, made sure it starts booting Monterey and Sonoma, thereafter only replaced CloverX64.efi and BOOTX64.efi with your 0094e0c-jief to make sure it's not kext, ACPI and config.plist related- same thing ..

If you boot Clover 5156 with your 0094e0c CloverX64.efi and BOOTX64.efi, can you boot macOS (even w/o any added kexttopatch entries)?

Answer 9 · 2024-01-05T16:53:48.000Z

14 folder is for all 14.
14.x is for a specific version.
I'm not sure what name you should use. I think matchos should 23. But again not sure.

I don't see anybody who confirmed it's working.

There is few people on the forum who said that it works, even the skywalk block. Also an issue : #651 (comment)

Anyway, if it's not working for you, well, I introduced a bug. I have another user saying the same. Let me see with him and I'll get back to you.

Answer 10 · 2024-01-05T20:23:07.000Z

There is few people on the forum who said that it works, even the skywalk block.

The BlockSkywalk Quirk is working for me, too, with your latest Clover beta from CircleCI, so the GUI freeze with 0094e0c is indeed a new and separate bug.

I have another user saying the same.

Which topic are you referring to - can you please post a link to that very post (even it it's in another language)?

So what happens if you boot with 0094e0c CloverX64.efi and BOOTX64.efi. Can you boot macOS, or do you also get stuck in frozen GUI, too?

I think matchos should 23. But again not sure.

I did some more reading, it's supposed to be 14.x for MatchOS. So this is how the Kernel and Kext Patches/ KextsToPatchsection looks like in my config.plist (but again, even without -> freeze):

<dict>
      <key>Name</key>
      <string>com.apple.iokit.IOSkywalkFamily</string>
      <key>Find</key>
      <data>SU9LaXQ=</data>
      <key>Replace</key>
      <data>SU9LaXM=</data>
      <key>InfoPlistPatch</key>
      <true/>
      <key>MatchOS</key>
      <string>14.x</string>
      <key>Comment</key>
      <string>Block macOS Sonoma built-in IOSkywalkFamily.kext</string>
      <key>Disabled</key>
      <false/>
</dict>

or via Clover Configurator: Find (HEX) 494F4B69 74 | Replace (HEX) 494F4B69 73

.. and @dateno1 , what about you.

Answer 11 · 2024-01-06T01:16:02.000Z

@dateno1 it wouldn't make sense for jief to issue a Clover binary which would block all kexts..

.. about to test

[EDIT] I now see what you mean. You need to quote and edit correctly and insert a line break before "It not only for Skywalk" so it doesn't end up in your quote of mine.

.. and you meant to say: "Procedure/ application is not only limited to Skywalk but can be applied to any kext" ;)

I want to add function like 'Block some of kext from /S/L/E'

It can used for future hardware degrade

Answer 12 · 2024-01-06T10:38:44.000Z

yes, @dateno1 , this is about blocking kexts from S/L/E..

The question is, does CloverX64-2024-01-04-10-59-02-0094e0c-jief.zip work for you, following the instructions:

don't just overwrite CloverX64.efi, but also duplicate it, rename the file you just cloned to BOOTX64.efi and also overwrite BOOTX64.efi in EFI/boot!!!

or does your Clover GUI also freeze/ lock up on your Hack.

Answer 13 · 2024-01-06T15:44:59.000Z

yes, @dateno1 , this is about blocking kexts from S/L/E..

The question is, does CloverX64-2024-01-04-10-59-02-0094e0c-jief.zip work for you, following the instructions:

don't just overwrite CloverX64.efi, but also duplicate it, rename the file you just cloned to BOOTX64.efi and also overwrite BOOTX64.efi in EFI/boot!!!

(and - optionally at this point because it doesn't influence the lock-up - add
<dict>
      <key>Name</key>
      <string>com.apple.iokit.IOSkywalkFamily</string>
      <key>Find</key>
      <data>SU9LaXQ=</data>
      <key>Replace</key>
      <data>SU9LaXM=</data>
      <key>InfoPlistPatch</key>
      <true/>
      <key>MatchOS</key>
      <string>14.x</string>
      <key>Comment</key>
      <string>Block macOS Sonoma built-in IOSkywalkFamily.kext</string>
      <key>Disabled</key>
      <false/>
</dict>
to config.plist)

or does your Clover GUI also freeze/ lock up on your Hack.

Sorry my mistake

It not mean Clover GUI Freeze. (GUI has no problem)

Is this work with all kexts on /S/L/E? (with same parameters exclude kext name)

I think this function can be used all degraded hardware with OCLP

If apple remove kext from /S/L/E that has not problem (We can add kext with bootloader)

but If they edit support list&not remove them (Like Skywalk) It can be problem

BlockSkywalk quirks is good but It just only for one kext (Not used for other kexts on future updates)

I think apple maybe do same thing again on future MacOSX version

Also that version (240104) is not work on my computers (That not work with BlockSkywalk&kexts)

I was success them with lastest beta version

Answer 14 · 2024-01-06T17:18:02.000Z

@dateno1 would you please download and unzip this archive:

BOOTX64.efi.zip

then copy BOOTX64.efi to EFI/boot, overwriting the existing BOOTX64.efi, reboot into Clover, and report back if that changed anything for you?

@dateno1 이 아카이브를 다운로드하고 압축을 풀어 주시겠습니까?

BOOTX64.efi.zip

그런 다음 BOOTX64.efi를 EFI/boot에 복사하고 기존 BOOTX64.efi를 덮어쓴 다음 Clover로 재부팅하고 변경된 사항이 있으면 다시 보고하시겠습니까?

Answer 15 · 2024-01-07T01:58:23.000Z

previous such requests and discussions for reference:

* [[NEEDED] Blocking kexts from Injection using config.plist to prevent macOS from not booting #350](https://github.com/CloverHackyColor/CloverBootloader/issues/350)

* https://www.insanelymac.com/forum/topic/343301-block-injected-kexts-using-configplist/

* https://www.tonymacx86.com/threads/clover-how-to-disable-kext-to-load.203679/ (locked topic)

* https://www.insanelymac.com/forum/topic/325619-kext-blocking-with-clover/

I want to function like them but clover is not changed in few years

I want to request to add new function like them

@dateno1 would you please download and unzip this archive:

BOOTX64.efi.zip

then copy BOOTX64.efi to EFI/boot, overwriting the existing BOOTX64.efi, reboot into Clover, and report back if that changed anything for you?

@dateno1 이 아카이브를 다운로드하고 압축을 풀어 주시겠습니까?

BOOTX64.efi.zip

그런 다음 BOOTX64.efi를 EFI/boot에 복사하고 기존 BOOTX64.efi를 덮어쓴 다음 Clover로 재부팅하고 변경된 사항이 있으면 다시 보고하시겠습니까?

I think you are not understand what is problem

skywalk is not problem (It already fixed on beta version and work well)

That not fix or prevent other problems on future update

If clover has added 'block kext' function at past 'BlockSkywalk' or something like this not needed

Also lastest beta version is better than 240104 version

Answer 16 · 2024-01-07T10:27:15.000Z

@dateno1 From what I understand, you'd like a way to block any kext you'd like. I thought the feature was already there ! But we can do it. Can you open another issue requesting that feature ?
@LeeBinder Lets' summurize : the issue about blocking skywalk is resolved, but a new issue arised : the graphic freeze. Am I right. If yes, we'll close this one and open a new one.

Answer 17 · 2024-01-07T10:31:35.000Z

dateno1, I sure DO understand what the "problem" is, to enable a general 'block kext' function to prevent what you call 'future hardware degrade' - it was me who posted the 4 links you quoted.

I'm also aware that jief666 has fixed the BlockSkywalk quirk in current beta versions, and that it works well in that limited regard.

At this stage, we can (actually should!) use the Skywalk kext as a TEST to see which effects jief666's edits have - THAT's where we're at.

So would you PLEASE, for heaven's sake, do the following:

deactivate the BlockSkywalk quirk in config.plist
add the patch according to the instructions
in addition to CloverX64-2024-01-04-10-59-02-0094e0c-jief.zip, also apply BOOTX64.efi.zip

reboot and share the result with us.

Thank you

dateno1, 나는 당신이 '향후 하드웨어 성능 저하'라고 부르는 것을 방지하기 위해 일반적인 'block kext' 기능을 활성화하는 "문제"가 무엇인지 이해하고 있습니다. 당신이 인용한 4개의 링크를 게시한 사람은 바로 저였습니다.

또한 jief666이 현재 베타 버전의 BlockSkywalk 문제를 수정했으며 제한된 측면에서 잘 작동한다는 것도 알고 있습니다.

이 단계에서 우리는 jief666의 편집 내용이 어떤 효과를 가지고 있는지 확인하기 위해 Skywalk kext를 테스트로 사용할 수 있습니다(실제로 그래야 합니다!).

그러니 제발 다음과 같이 해주세요:

config.plist에서 BlockSkywalk 쿼크를 비활성화합니다.
지침에 따라 패치를 추가합니다.
[CloverX64-2024-01-04-10-59-02-0094e0c-jief.zip] 외에(https://github.com/CloverHackyColor/CloverBootloader/files/13828780/CloverX64-2024-01-04) -10-59-02-0094e0c-jief.zip), BOOTX64.efi.zip도 적용합니다.

재부팅하고 결과를 공유해 주세요.

감사합니다

Answer 18 · 2024-01-07T10:52:55.000Z

dateno1 From what I understand, you'd like a way to block any kext you'd like. I thought the feature was already there !

@jief666 see #350 (comment) by stevezhengshiqi. It was indeed working before r5122, but then came the switch to OC code base which must have nuked this feature. I thought you were aware of this.

Can you open another issue requesting that feature ?

jief666 please no: apart from a certain language barrier Korean > English, dateno1's request was and is clear both in the title and in his first post in this issue topic, that it's a general request just mentioning the Skywalk kext as a current example, but other than that separate from the other BlockSKywalk quirk topic. Also we've already had another request issue here regarding this, so this issue here should be enough, and hopefully the last in this regard

Lets' summurize : the issue about blocking skywalk is resolved, but a new issue arised : the graphic freeze. Am I right.

Again, not exactly: restoring the BlockSkywalk quirk which was introduced in 5155, broken ( regression) in 5156, repaired by you as per the other issue. This here now is to restore another regression that general blocking of any kext in S/L/E - which was working before - has not been working anymore since adaptation of OC code, as noted before by @stevezhengshiqi .

a new issue arised : the graphic freeze.

If that's what you call the Clover GUI locking up after hitting an icon which is supposed to boot any macOS: yes, that's new, and it keeps me from testing if the feature requested in this (and the previous) topic might actually be working with your Clover64/Boot64.efi. So the freeze is in the way of the testing and would need to be resolved first as part of this debugging.

Hope all is clear now so we can proceed (you with debugging and we with testing) ;)

Answer 19 · 2024-01-07T20:25:40.000Z

As a matter of fact, you already have the working code in the function behind the BlockSKywalk quirk:

blocks a kext with a specified name or identifier in S/LE
only blocks if for a specific version of macOS, in this case Sonoma 14.x or kernel 23.x

So in a nutshell, that code would need to be linked to the Kernel and Kext Patches/ KextsToPatch section and executed with the parameters from there. Maybe you can even call the same function, or duplicate that function into one which accepts parameters.

Answer 20 · 2024-01-07T23:39:43.000Z

@dateno1 From what I understand, you'd like a way to block any kext you'd like. I thought the feature was already there ! But we can do it. Can you open another issue requesting that feature ? @LeeBinder Lets' summurize : the issue about blocking skywalk is resolved, but a new issue arised : the graphic freeze. Am I right. If yes, we'll close this one and open a new one.

Few years ago some of people request this function but nothing changed and Now apple change kext&make problem

I was worry apple create 'anther skywalk' again

dateno1, I sure DO understand what the "problem" is, to enable a general 'block kext' function to prevent what you call 'future hardware degrade' - it was me who posted the 4 links you quoted.

I'm also aware that jief666 has fixed the BlockSkywalk quirk in current beta versions, and that it works well in that limited regard.

At this stage, we can (actually should!) use the Skywalk kext as a TEST to see which effects jief666's edits have - THAT's where we're at.

So would you PLEASE, for heaven's sake, do the following:
1. deactivate the BlockSkywalk quirk in config.plist

2. add the patch according to [the instructions](https://github.com/CloverHackyColor/CloverBootloader/issues/640#issuecomment-1879216632)

3. in addition to [CloverX64-2024-01-04-10-59-02-0094e0c-jief.zip](https://github.com/CloverHackyColor/CloverBootloader/files/13828780/CloverX64-2024-01-04-10-59-02-0094e0c-jief.zip), also apply [BOOTX64.efi.zip](https://github.com/CloverHackyColor/CloverBootloader/files/13850532/BOOTX64.efi.zip)
reboot and share the result with us.

Thank you

I was tested BlockSkywalk quirk on 3 boards
GA-H110N, GA-Z390M : Work well
GA-B365M Aorus Elite : Can't boot MacOSX with Clover beta version (with/without BlockSkywalk quirk)

As a matter of fact, you already have the working code in the function behind the BlockSKywalk quirk:
1. blocks a kext with a specified name or identifier in S/LE

2. only blocks if for a specific version of macOS, in this case Sonoma 14.x or kernel 23.x
So in a nutshell, that code would need to be linked to the Kernel and Kext Patches/ KextsToPatch section and executed with the parameters from there. Maybe you can even call the same function, or duplicate that function into one which accepts parameters.

I don't think it duplicated

BlockSkywalk is function only for Skywalk

It not used for another kexts on /S/L/E

Answer 21 · 2024-01-08T21:58:09.000Z

Once more, this is not the "BlockSkywalk quirk" issue topic..

.. and neither is this a "Can't boot MacOSX on GA-B365M Aorus Elite with Clover beta version" issue topic - that's completely unrelated (and if "with/without BlockSkywalk quirk" matters even less)...

Sure, "BlockSkywalk is function only for Skywalk", but what can be applied to kext a in S/L/E for macOS 14 can be applied to kext b in S/L/E to macOS xy.z, too, can't it? That's what functions and algorithms are about....

dateno1, since there's obviously at least a dire language barrier, I highly recommend to keep quiet now since all has been said and nothing productive can be added anymore. Let's jief666 give the space to fix this regression introduced with r5123 and re-add it to the current OC code based Clover.

Peace out for now

다시 한 번 말씀드리지만, 이것은 "BlockSkywalk 별난" 문제 주제가 아닙니다.

.. 그리고 이것은 "Clover 베타 버전이 포함된 GA-B365M Aorus Elite에서 MacOSX를 부팅할 수 없습니다" 문제 주제도 아닙니다. 이는 완전히 관련이 없습니다(그리고 "BlockSkywalk 기발함이 있거나 없는"이 훨씬 덜 중요하다면)...

물론, "BlockSkywalk는 Skywalk 전용 기능입니다." 하지만 macOS 14용 S/L/E의 kext a에 적용할 수 있는 것은 S/L/E의 kext b에도 적용할 수 있고 macOS xy.z에도 적용할 수 있습니다. 그렇지? 그것이 바로 함수와 알고리즘에 관한 것입니다....

dateno1, 적어도 심각한 언어 장벽이 분명히 있기 때문에 모든 것이 말해지고 더 이상 생산적인 내용을 추가할 수 없으므로 지금은 조용히 있는 것이 좋습니다. jief666은 r5123에 도입된 이 회귀를 수정하고 이를 현재 OC 코드 기반 Clover에 다시 추가할 공간을 제공합니다.

지금은 평화를 누리세요

Answer 22 · 2024-01-08T23:26:02.000Z

Once more, this is not the "BlockSkywalk quirk" issue topic..

.. and neither is this a "Can't boot MacOSX on GA-B365M Aorus Elite with Clover beta version" issue topic - that's completely unrelated (and if "with/without BlockSkywalk quirk" matters even less)...

Sure, "BlockSkywalk is function only for Skywalk", but what can be applied to kext a in S/L/E for macOS 14 can be applied to kext b in S/L/E to macOS xy.z, too, can't it? That's what functions and algorithms are about....

dateno1, since there's obviously at least a dire language barrier, I highly recommend to keep quiet now since all has been said and nothing productive can be added anymore. Let's jief666 give the space to fix this regression introduced with r5123 and re-add it to the current OC code based Clover.

Peace out for now

다시 한 번 말씀드리지만, 이것은 "BlockSkywalk 별난" 문제 주제가 아닙니다.

.. 그리고 이것은 "Clover 베타 버전이 포함된 GA-B365M Aorus Elite에서 MacOSX를 부팅할 수 없습니다" 문제 주제도 아닙니다. 이는 완전히 관련이 없습니다(그리고 "BlockSkywalk 기발함이 있거나 없는"이 훨씬 덜 중요하다면)...

물론, "BlockSkywalk는 Skywalk 전용 기능입니다." 하지만 macOS 14용 S/L/E의 kext a에 적용할 수 있는 것은 S/L/E의 kext b에도 적용할 수 있고 macOS xy.z에도 적용할 수 있습니다. 그렇지? 그것이 바로 함수와 알고리즘에 관한 것입니다....

dateno1, 적어도 심각한 언어 장벽이 분명히 있기 때문에 모든 것이 말해지고 더 이상 생산적인 내용을 추가할 수 없으므로 지금은 조용히 있는 것이 좋습니다. jief666은 r5123에 도입된 이 회귀를 수정하고 이를 현재 OC 코드 기반 Clover에 다시 추가할 공간을 제공합니다.

지금은 평화를 누리세요

It not only for sonoma

If someone add this function at 2022 'BlockSkywalk' and some of quirks on future is not needed

I think you can understand what i want to say I will close this issue (And open again if apple make another 'Skywalk')

I wasn't said about 'GA-B365M Aorus Elite' or 'Broadcom Wireless' on this thread (You said apply beta efi(not worked version) or something)

Don't used korean translated by google or something (It hard to understand + some of part wrong)

Answer 23 · 2024-01-09T08:59:56.000Z

2022? LOL we're already in 2024..

You're painfully confused, mate. Hope you can get some help

Answer 24 · 2024-01-09T23:26:56.000Z

2022? LOL we're already in 2024..

You're painfully confused, mate. Hope you can get some help

previous such requests and discussions for reference:

* [[NEEDED] Blocking kexts from Injection using config.plist to prevent macOS from not booting #350](https://github.com/CloverHackyColor/CloverBootloader/issues/350)

* https://www.insanelymac.com/forum/topic/343301-block-injected-kexts-using-configplist/

* https://www.tonymacx86.com/threads/clover-how-to-disable-kext-to-load.203679/ (locked topic)

* https://www.insanelymac.com/forum/topic/325619-kext-blocking-with-clover/

It duplicated request

It already said at past but no one do that

I think it too late