Référence
Glossaire de la sécurité macOS
Des définitions courtes et précises des termes de sécurité de la plateforme Apple utilisés dans les guides.
Ces guides sont pour l'instant publiés en anglais uniquement. Les traductions sont en préparation.
- Configuration ProfileAnglais
- A configuration profile is an XML property list (.mobileconfig) that delivers settings, restrictions and certificates to Apple devices.
- Endpoint Security FrameworkAnglais
- Endpoint Security is the macOS API that lets approved security tools monitor and authorize process, file and system events in user space.
- FileVaultAnglais
- FileVault is the macOS full-volume encryption feature that ties access to a Mac's data volume to user credentials and a recovery key.
- GatekeeperAnglais
- Gatekeeper is the macOS mechanism that checks downloaded apps for a valid Developer ID signature and notarization before they run.
- Lockdown ModeAnglais
- Lockdown Mode is an optional Apple protection for people facing targeted spyware, restricting features that attackers commonly exploit.
- MDM (Mobile Device Management)Anglais
- MDM is Apple's device management protocol that lets organizations enroll Macs and remotely deliver profiles, commands, apps and updates.
- NotarizationAnglais
- Notarization is Apple's automated scan of Developer ID-signed software, producing a ticket that Gatekeeper checks before an app runs.
- Secure EnclaveAnglais
- The Secure Enclave is an isolated security subsystem in Apple chips that protects keys, biometric data and FileVault secrets from the main OS.
- Signed System Volume (SSV)Anglais
- The Signed System Volume is a cryptographically sealed, read-only macOS system volume whose integrity is verified against an Apple signature.
- System Integrity Protection (SIP)Anglais
- System Integrity Protection is a macOS security layer that stops even the root user from modifying protected system files and processes.
- TCC (Transparency, Consent, and Control)Anglais
- TCC is the macOS privacy framework that makes apps request user consent before accessing protected data, devices and system capabilities.
- XProtectAnglais
- XProtect is the built-in, signature-based anti-malware technology in macOS, updated by Apple independently of regular OS releases.