I feel confident in what I say but mistakes can always slip into one's memoryĪgain if a kernel extension adds functionality you want/need and you trust the developer and feel certain enough about the quality of the product I wouldn't worry too much.If you build Ray from source, remove the build option build -cxxopt='-D_GLIBCXX_USE_CXX11_ABI=0' from the file cpp/example/.bazelrc before running your application.

I will add though that I'm writing this by memory so if there are slight flaws in how I've remembered this feel free to correct me.

That and of course the fact that kernel extensions will inherently open more attack vectors to kernel privilege levels Since a kernel extension lives in the memory space of the kernel, it would change the hash value so this function needs to be turned off. If it doesn't match it's considered no longer trusted. In the highest security mode, the whole kernel is checked against a hash of what Apple knows at build-time. The reason you need to enter reduced security to have kernel extensions now is new hardware features with T2 and newer Macs (T1 maybe? I can't remember when it was introduced). The FUSE project sort of tries to do the same for file system support, though FUSE on the Mac right now is itself a kernel extension, but then it allows user-space programs to exist that act as file system extensions going through the FUSE kernel extension without each file system extension itself needing to be in the kernel. Sort of making these extensions more like exokernel designs in a way. However there are still some things you can't do without a kernel extension so that is still supported, though Apple will likely keep expanding the DriverKit model to encompass more use-cases.

Kernel extensions that have a users-ace replacement in place are considered deprecated. Which means the programs won't need full system access, and they will effectively be as harmless as any other program, while still being able to for example make drivers to interact with USB devices. That is, they have released a users-ace frameworks called DriverKit, so that a lot of things that previously required kernel extensions can now be done from Userspace. From this point on my message is just extra unnecessary background info.Īpple is sort of phasing out kernel extensions.

FROGUE instal the new version for apple