search

sektioneins / SUIDGuard

SUIDGuard - a TrustedBSD Kernel Extension that adds mitigations to protect SUID/SGID processes a bit more
392 stars 52 forks source link

kext signing security #2

Open rwsnyder opened 9 years ago

rwsnyder commented 9 years ago

Is this kext signed, and if not, do you recommend disabling kext signing security to install it?

stefanesser commented 9 years ago

The KEXT in the "release" section should be signed, if not then this is a bug.

Disabling kext signing cannot be a recommended step, although kext signing does not really stop the root user from loading code into the kernel in the first place.