Re: API to determine status of System Integrity Protection?
Re: API to determine status of System Integrity Protection?
- Subject: Re: API to determine status of System Integrity Protection?
- From: Stephane Sudre <email@hidden>
- Date: Sun, 13 Sep 2015 23:47:47 +0200
On Sat, Sep 12, 2015 at 9:53 PM, Ed Wynne <email@hidden> wrote:
>
> On Sep 12, 2015, at 1:45 PM, sqwarqDev <email@hidden> wrote:
>
>>
>>> On 13 Sep 2015, at 00:43, SevenBits <email@hidden> wrote:
>>>
>>> That document doesn't mention an API…
>>>
>> Hence, since that is the current documentation, my conclusion : “Don’t think so”.
>
>
> There is an API. Much like with sandboxing it just may not be public, which means it is inappropriate for discussion here. I’m not sure why Apple considers this kind of thing off limits, but that is inappropriate for discussion here as well.
I must be missing something but why should there be an API?
- determining whether SIP is on requires to check whether the running
OS on 10.11 or later. Also it could done by parsing the output of $
csrutil status but this would assume the output format will not change
in the future.
- determining whether you can write to a file or folder can be done
with the usual BSD, Cocoa APIs, can't it?
- knowing which parts of the file hierarchy are protected is covered
by the documentation (Interestingly I've just discovered that
/Applications/Utilities is a no trespassing area).
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden