Revoking third-party kext permission

macOS requires that a user visit the "Security" section of System Preferences in order to approve running third-party kernel extensions.


How does one reset the approval list or remove a specific vendor's key from the list?


Example use case: Enabling QA to re-test application logic which is only reached before the extension is allowed to run

Replies

In theory, you can run "spctl kext-consent" from recovery. It would probably be better to just use a VM that can be easily reset.

Here are the instructions for modifying your kext consent database. It isn't too hard.
https://stackoverflow.com/questions/47810161/macos-high-sierra-kext-loading-are-there-any-ways-to-cancel-user-approval/51684219#51684219