Skip to content

02 · Hardening area

Platform Integrity

macOS protects its own operating system from tampering — even by root. Learn how System Integrity Protection, the Signed System Volume and the secure boot chain fit together, how to verify they are intact, and why kernel extensions are giving way to system extensions.

SIPSigned System Volumekmutil
  1. System Integrity Protection and the Signed System Volume

    What SIP and the Signed System Volume protect on macOS, how to verify them, why they stay on in production, and how system extensions replace kernel extensions.

03 · NextApp Execution Control