Hacker News new | ask | show | jobs
by TypesWillSaveUs 241 days ago
You can disable SIP and even disable immutable kernel text, load arbitrary drivers, enable/disable any feature, remove any system daemon, use any restricted entitlements. The entire security model of macOS can be toggled off (csrutil from recoveryOS).
1 comments

Aware of that. Way too big of a request just to make reasonable configuration changes, like shutting down daemons, etc.
No, it’s not that big a request. You literally have the capability. The average user does not need it.

What is hard about this?

Stopping/disabling a service should be a command, like it is on Windows or Linux. Not configured on a read-only volume bundled with other security guarantees.

It's pretty simple to keep these two things separate, like everywhere else in the present and history of the industry.

Just because Windows/Linux do things one way doesn't mean the rest of the industry has to follow it. ;P