Objective-See’s KnockKnock is an excellent tool for inspecting your extensions, and checking that they are all above board. Even simple conflicts can make a Mac unusable, and a malware kernel extension would be catastrophic. Kernel extensions are vital – they include all the main hardware drivers which make your Mac work – but because they operate so close to the kernel, are an Achilles heel. XProtectPlistConfigData changes more frequently, the last update being on 9 July 2016, but its version number seems fixed at 1. The former data is seldom updated, and currently remains at version 3.30.1 of 5 April 2016. The list of blocked kernel extensions is split between Incompatible Kernel Extension Configuration Data, kept in /System/Library/Extensions/AppleKextExcludeList.kext, and XProtectPlistConfigData. El Capitan’s XProtect extends its coverage beyond simple malware, to block a long list of incompatible kernel extensions (KEXTs), and a shorter list of undesirable Safari extensions which I detailed here.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |