Profile Photo
This query on how to staple ticket with unix executable after notarization. I am new to MAC OSX environment. Following steps are used to notarize and staple unix executable :- 1) Enabled hardened runtime to already created unix executable with command :- codesign --force --option runtime --sign "Developer ID Application: Company LLP" <unix… (Show more)
Profile Photo
I have been asked the above question by a long-time developer, and I don't know the answer.  To find out I fired up Xcode (11.0beta6), added my non-developer AppleID to the account preferences, flipped the signing team from my developer account to the new "Gavin Eadie (Personal Team)," hardened the app, archived it and tried to send it for… (Show more)
Profile Photo
I've just read about System Extensions and DriverKit, and it's unclear to me - does this mean that KEXT will be deprecated? If so, how soon will it happen?
in Kernel
Profile Photo
Is anyone aware of sample code for System Extensions and Endpoint Security? For example, in the SOTU presentation it was mentioned that System Extensions along with Endpoint Security cover 75% of use cases. What use cases are the new APIs designed to cover? How can Endpoint Security be leveraged to replace the kauth API? How do these extensions… (Show more)
in System Extensions
Profile Photo
I think I understand notarization: It sends binary to Apple Apple performs automatic verification If verification succeeds, (and perhaps this is the wrong terminology) a Notarization Ticket is stored on Apple's servers When an end user goes to use the Notarized Binary, macOS requests a Notarization Ticket for the binary, and if this succeeds,… (Show more)
in Mac Apps
Profile Photo
Is there a guide as to how to notarize kexts?   I am able to notarize application level code successfully, but I can not find any guidelines as to how to do this for kernel extensions (despite receiving an email suggesting that it is time to do this!). The UI in Xcode is unable to notarize archived kexts, and the (minimal!) documentation for the… (Show more)
in Mac Apps
Profile Photo
https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution?language=objc   "Important Beginning in macOS 10.14.5, all new or updated kernel extensions and all software from developers new to distributing with Developer ID must be notarized in order to run. In a future version of macOS, notarization will be required… (Show more)
in Mac Apps