[OpenAFS] Providing signed packages (was Re: any experiences with OpenAFS client ...)

Dave Botsch botsch@cnf.cornell.edu
Wed, 29 Oct 2014 13:56:40 -0400


One can also disable kext signing on Yosemite by adding
"kext-dev-mode=1" to the boot args.


On Wed, Oct 29, 2014 at 05:31:36PM +0000, Brandon Allbery wrote:
> So, an interesting and undoubtedly temporary workaround for unsigned
> kexts on Yosemite/OS X 10.10 is that they can apparently be loaded by
> LaunchDaemons.
> http://dan.langille.org/2014/10/28/getting-openconnect-tuntap-working-on-yosemite-osx/
> 
> It wouldn't surprise me if Apple closed that loophole soonish, possibly
> even in a security update instead of a point release.
> 
> -- 
> brandon s allbery kf8nh                           sine nomine associates
> allbery.b@gmail.com                              ballbery@sinenomine.net
> unix openafs kerberos infrastructure xmonad        http://sinenomine.net

-- 
********************************
David William Botsch
Programmer/Analyst
@CNFComputing
botsch@cnf.cornell.edu
********************************