Skip to content

Commit

Permalink
Revert "Add DriverKit exemptions"
Browse files Browse the repository at this point in the history
This reverts commit 84279af.
  • Loading branch information
osy committed Sep 13, 2020
1 parent 37285a8 commit 0e463c0
Show file tree
Hide file tree
Showing 2 changed files with 0 additions and 7 deletions.
2 changes: 0 additions & 2 deletions AMFIExemption/Info.plist
Original file line number Diff line number Diff line change
Expand Up @@ -35,8 +35,6 @@
<key>Exemptions</key>
<array>
<string>com.apple.private.CoreGraphics.debugging</string>
<string>com.apple.developer.system-extension.*</string>
<string>com.apple.developer.driverkit*</string>
</array>
</dict>
</dict>
Expand Down
5 changes: 0 additions & 5 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -24,11 +24,6 @@ To add an entitlement exemption, open `Info.plist` in your favourite plist edito

Note that having an entitlement in the exemption list does *not* mean that entitlement is granted to all apps. Your app must still be code-signed with the requested entitlement. This KEXT only disables the requirement that most entitlements require an Apple CA anchor. You can either self-sign with your own certificate or ad-hoc sign with no certificate and still use the entitlement.

## Default Exemptions

* CoreGraphics debugging (normally only granted to Quartz Debug app) for setting debug options for WindowServer
* DriverKit and System Extension installation (normally granted to approved developers who pay $99/year)

## Security

It is highly recommended that this KEXT is loaded by OpenCore with the vault feature enabled. This would prevent malware from modifying `Info.plist` and granting itself arbitrary entitlements which defeats SIP+AMFI security.
Expand Down

0 comments on commit 0e463c0

Please sign in to comment.