How to choose which scope to use?

None of them!

Apple is in the process of deprecating all KEXT support on macOS, and one of the first steps on that path is the deprecation of kauth in favour of EndpointSecurity. If you’re writing new code, that’s what you should be using.

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

ps DTS is closed 21 Dec through 1 Jan.

Thanks,

But, I'm just documenting old code.

And I need to introduce them.

I want to know when to use them and I need some scenarios to choose the right scope.(Even though they were abandoned.)

The best documentation for these scopes is Technote 2127 Kernel Authorization.

In reality, you typically don’t get to choose between scopes. Rather, you look at the operation you want to work with and that operation then determines the scope.

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

ps DTS is closed 21 Dec through 1 Jan.

Thanks,

I've read that document before and my app only uses Vnode Scope.

But, I do not know how to test Process Scope and Generic Scope.

Or should I say how to trace them.

Thank you very much,

I just want a clear answer and I will introduced them briefly.

Even if they're abandoned.