I've developed a custom VPN system extension (macOS, Packet Tunnel Provider).
On a first installation, the user has to allow installation of the system extension (via Security & Privacy). My question is, what should happen when the user updates the app to a newer version - will he get the 'allow system extension installation' popup again? Or is it a 'one time popup' only?
IIRC updates don’t require further user approval. However, in situations like this my advice is to not listen to my advice (-: but instead run through the process yourself and see for yourself.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"
Thanks for the advice :) I did try to check the behavior, and when the user upgraded the app, he needed to allow system extensions again. This was unexpected (for me) so this is the reason I asked this. However, the user got the first version of the app via an MDM service, and then (few days later), the app inform the user that a new version is available, and the user chose to install it. Here the installation wasn't don't via MDM.
So to summarize, I'm not sure if the 'please allow system extension' popup at the second time is expected/ a bug / or if it's related to who/what installed the new version.
There’s two parts to this:
If you’re working with managed Macs, you shouldn’t need user approval at all. Rather, you’d push a com.apple.system-extension-policy payload.
If you see this problem outside of a managed environment, I definitely recommend you file a bug about it. It doesn’t really matter whether it’s working as designed or not, if it’s causing you grief (well, your users, and hence you indirectly) then it’s definitely bugworthy. The bug may come back as “not to be fixed” but that is, in itself, a win: You’ve confirmed the policy and you’ve registered your complaint.
Please post your bug number, just for the record.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"