s/booting securely/running only the code Apple approves of/g

arcticbull 2 days ago | parent | next [-]

Not exactly, distribution conversation aside this is specific to kernel extensions. Apple's been moving drivers out of kernel space and into user space for several years [1]. There's a lot of good reasons for doing so, and not a lot of drawbacks. I'd consider this to be a strongly worded API deprecation notice.

[1] https://developer.apple.com/documentation/driverkit

▲

bapak 2 days ago | parent | prev [-]

You can run unverified code if you build it yourself. You can distribute unverified code by just paying $99/year to Apple. Not great, but still no need for specific code approval.

▲

cyberax 2 days ago | parent | next [-]

Not if you want to use some features like bridged networking. For that you need to go and beg Apple for an entitlement. Or you have to disable SIP entirely.

▲

Barbing 2 days ago | parent [-]

They respond to the begging as incredibly well as they respond to feedback/bug reports, right?

	▲	cyberax 2 days ago \| parent [-]
		To be fair, they _do_ respond well in this particular case. But you have to write an email to a developer somewhere in Apple, as there is no established process.

▲

Gigachad 2 days ago | parent | prev [-]

You can run whatever scripts you want without paying anything. Pretty sure the signing thing only applies to .app programs.