Re: 10.14 says 1.9.3 kexts are "incompatible"
Posted: Fri Nov 01, 2019 2:57 am
I’ve found one more report that indicates 10.14.6 might sometimes reject kexts even though they’re notarized.
The post also notes the following:
Contrary to that statement, when I run codesign on the 1.9.2 kexts (which all load just fine), I get:
So the hardened runtime feature may not be the culprit after all?
The post also notes the following:
Kext loads fine when i disable hardened runtime but whenever i enable hardened runtime and then try to load kext with kextutil i get this error.
Contrary to that statement, when I run codesign on the 1.9.2 kexts (which all load just fine), I get:
- Code: Select all
$ codesign -dv --entitlements :- 2>&1 \
/Library/Extensions/spl.kext/Contents/PlugIns/KernelExports.kext/KernelExports \
/Library/Extensions/spl.kext/Contents/MacOS/spl \
/Library/Extensions/zfs.kext/Contents/MacOS/zfs \
| grep -E --color=always 'flags=\w+'
CodeDirectory v=20200 size=226 flags=0x10000(runtime) hashes=1+3 location=embedded
CodeDirectory v=20200 size=1679 flags=0x10000(runtime) hashes=47+3 location=embedded
CodeDirectory v=20200 size=24623 flags=0x10000(runtime) hashes=764+3 location=embedded
So the hardened runtime feature may not be the culprit after all?