MacOS Mojave - load unsigned kernel extension
-
25-05-2021 - |
Question
in macOS mojave one can't simply load unsgined kexts:
$ sudo kextutil -l /Applications/myapp.app/Contents/Resources/Driver.kext
Untrusted kexts are not allowed
What should I do to be allowed (besides a dev cert..)?
Will these do?:
sudo nvram boot-args=kext-dev-mode=1
csrutil enable --without kext
- manually allowing via the GUI?
La solution
There are two avenues to get the extension whitelisted:
- Manage the mac using MDM and follow the steps to have your MDM pre-clear this specific extension.
- Open the Security System Preferences and click to white list this extension once you have attempted to load it one time.
https://developer.apple.com/library/archive/technotes/tn2459/_index.html
The above article has the two buttons you need to click in the GUI to white list each extension on each machine.
Licencié sous: CC-BY-SA avec attribution
Non affilié à apple.stackexchange