system integrity re-enable driver stops working

Question

system integrity re-enable driver stops working

Closed this issue 4 years ago · 8 comments

I don't like the ideea of leaving the system integrity disabled. It works great with it disabled but after I re-enable, it does not detect the soundcard. Any thoughts on this?

Answer 1 · 2021-03-29T19:29:56.000Z

@thelostprophet21

Yes. My contribution to the world is software for EMU users.

I don't agree with Apple SIPping my money through periodic fees for this. It's like a penalty on work done for free.

I'm also not convinced that this SIP policy helps "system integrity", as you basically need money, not integrity, to get such a signing key. And maybe you don't even need a key to get malicious software into the mac kernel.

More in detail:
Apple's sells software signing keys, and only by using that, OSX SIP accepts my driver.
Thus they force developers buying thesekeys

For now they still offer the possibility to turn off this SIP mechanism. This may change in the future and then using my driver would be made impossible by Apple.

You have any suggestions to improve the situation?

Answer 2 · 2021-03-29T19:48:08.000Z

Thanks for your reply. I am not a programmer and am fairly new to MacOS and felt like I am doing something wrong if I leave that security option turned off.

…

On Mon, Mar 29, 2021 at 10:30 PM Wouter1 ***@***.***> wrote: @thelostprophet21 <https://github.com/thelostprophet21> Yes. My contribution to the world is software for EMU users. I don't agree with Apple SIPping my money through periodic fees for this. It's like a penalty on work done for free. I'm also not convinced that this SIP policy helps "system integrity", as you basically need money, not integrity, to get such a signing key. And maybe you don't even need a key to get malicious software into the mac kernel. More in detail: Apple's sells software signing keys, and only by using that, OSX SIP accepts my driver. Thus they force developers buying thesekeys For now they still offer the possibility to turn off this SIP mechanism. This may change in the future and then using my driver would be made impossible by Apple. You have any suggestions to improve the situation? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#137 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ATOMAV6M4YGGR6J4ZRE6TNDTGDPNLANCNFSM4Z7X7JRQ> .

-- Andrei Pastor

Answer 3 · 2021-03-30T06:39:28.000Z

@thelostprophet21 nothing wrong with that.
But it makes it easier for other software too to put something into your kernel. So just be a bit careful on what you download and run

Answer 4 · 2021-03-30T06:41:00.000Z

Thanks a lot for your help and support! Have a great year ahead.

…

On Tue, Mar 30, 2021 at 9:39 AM Wouter1 ***@***.***> wrote: @thelostprophet21 <https://github.com/thelostprophet21> nothing wrong with that. But it makes it easier for other software too to put something into your kernel. So just be a bit careful on what you download and run — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#137 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ATOMAVYWDV2RQG5GHKL7GITTGFW25ANCNFSM4Z7X7JRQ> .

-- Andrei Pastor

Answer 5 · 2021-04-26T10:17:55.000Z

Hello. I've just updated to Big Sur OS and was surprised to see an update on EMU github as well. Thanks a lot for your support. I can still use the emu because of you. Is there any way I could send a donation? I would like to buy a cup of coffee :) Thanks Andrei On Tue, Mar 30, 2021 at 9:40 AM Andrei Pastor ***@***.***> wrote:

…

Thanks a lot for your help and support! Have a great year ahead. On Tue, Mar 30, 2021 at 9:39 AM Wouter1 ***@***.***> wrote: > @thelostprophet21 <https://github.com/thelostprophet21> nothing wrong > with that. > But it makes it easier for other software too to put something into your > kernel. So just be a bit careful on what you download and run > > — > You are receiving this because you were mentioned. > Reply to this email directly, view it on GitHub > <#137 (comment)>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/ATOMAVYWDV2RQG5GHKL7GITTGFW25ANCNFSM4Z7X7JRQ> > . > -- Andrei Pastor

-- Andrei Pastor

Answer 6 · 2021-04-26T19:46:23.000Z

@thelostprophet21

Thanks for the report! Glad that you like it.

You could report the good working and thanks on the ticket for that - #109

I don't know you could give me a money donation. I never bothered with internet payment systems and know very little about that Sending money with snail mail would probably cost more than your intended donation to start with...

Answer 7 · 2021-04-27T04:00:22.000Z

Ever thought of posting a BTC, or ETH address? It's almost free, takes 5 min to setup, and cryptocurrency is increasing in popularity.

…

On Mon, Apr 26, 2021 at 10:46 PM Wouter1 ***@***.***> wrote: @thelostprophet21 <https://github.com/thelostprophet21> Thanks for the report! Glad that you like it. You could report the good working and thanks on the ticket for that - #109 <#109> I don't know you could give me a money donation. I never bothered with internet payment systems and know very little about that Sending money with snail mail would probably cost more than your intended donation to start with... — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#137 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ATOMAV5N7WWAANLFIKMFZ3LTKW7KHANCNFSM4Z7X7JRQ> .

-- Andrei Pastor

Answer 8 · 2021-04-27T20:48:26.000Z

@thelostprophet21 I know what they are and how they work in theory but never looked on how they really work in practice.