Notes from Security lab (Wednesday, June 9th 2021)

Question: As of macOS Big Sur, it is not required for an installer package to be signed or notarized in order for it to be installed via Installer.app or the installer command line tool. Is this still the case on macOS Monterey? If it is not, what requirements have changed?

Answer: Restrictions are the same as on macOS Big Sur for installer packages with regards to notarization.

Question: Is there any additional guidance from Apple on the installation and use of multiple solutions using System Extensions and/or Network Extensions when it comes to co-habitation?

For example, is it supported by Apple to have two "Network Filters" (each managed by a separate application) installed and active?

Answer: Having multiple network system extensions installed is supported by Apple. Multiple content filters are supported on iOS and macOS:

  • iOS: 2 filters maximum
  • macOS: 8 filters maximum

Question: As of macOS Big Sur, it is not required for an application to be signed or notarized in order for it to be installed or run on an installation of macOS with Apple's full security settings enabled. Is this still the case on macOS Monterey? If it is not, what requirements have changed?

Answer: Restrictions on macOS Monterey are the same as on macOS Big Sur for applications with regards to signing and notarization.

Question: What are Apple’s plans, if any, to support Azure AD workplace join as a replacement for on-premise Active Directory binding?

Answer: We see you're also signed up for the Friday Security lab, we'll see if we can get this question answered there.

Question: What are Apple's plans, if any, to support using Apple's own two-factor authentication system (not the two step one which uses SMS) to log into a Mac running macOS

Answer: We see you're also signed up for the Friday Security lab, we'll see if we can get this question answered there.

  • Thanks for sharing!

Add a Comment