Hacker News new | ask | show | jobs
by lgg 1021 days ago
This is awesome. macOS actually enables the same env var protections by default if your process is opted into the hardened runtime. You can do that by passing —-options=runtime to your codesign invocation.
1 comments

What's the easiest way to use those variables anyway on a binary that's been compiled that way? Does it need SIP to be off?
You could try completely unsigning the binary: https://reverseengineering.stackexchange.com/a/13623

This won't work for everything, and it probably does need SIP to be off (also make a backup!) but it might be a way to get something to work.

Yes, and then patch dyld to enable library insertion again.