Skip to content

A tiny macOS 10.12 Sierra kernel extension for disabling CS_REQUIRE_LV system-wide

License

Notifications You must be signed in to change notification settings

mologie/macos-disable-library-validation

Repository files navigation

DisableLibraryValidation

If you are here, because you wish to fix issues with your NVIDIA web driver, please head over to the new NVWebDriverLibValFix page. This software is obsolete for fixing NVIDIA web driver issues.

Beware: This software intentionally weakens the security of your Mac and may turn your machine into a fire-breathing dragon. You should not install it.

With that out of the way: This software installs a small kernel patch at boot-time, which disables Library Validation. Library Validation exists independently of SIP and cannot be disabled without a kernel patch.

You don't want Library Validation to be disabled on your Mac. However, if it were to be disabled:

  • Processes can load arbitrary libraries
  • root becomes more powerful (may load arbitrary libraries into any process depending on SIP status)
  • Security is weakened, because some user processes could be fooled to run additional code without root's explicit request, which may grant access to daemons that depend on Library Validation for secure validation of code identity.

Installation

The latest release and installation instructions are available on the Releases Page.

All releases are unsigned and require kernel code signing to be disabled (csrutil enable --without kext).

Installation (from source)

Install Xcode, then ./install.sh.

On success, you should see a message from 'DisableLibraryValidation' in the output of sudo dmesg and find 'com.apple.kext.mologie.DisableLibraryValidation' in the output of kextstat.

The patches take effect immediately, but you might have to restart processes that are broken by Library Validation (such as iBooks with the NVIDIA Web Drivers.)

Removal

sudo ./install.sh uninstall, which runs kextunload to unload the extension and deletes it from disk.

Bug Reports

This software comes with no support or implied warrenty. I do not accept bug reports, but I welcome pull requests that fix bugs should you have found any. You may also submit pull requests for adding information to this readme file, or contact my privately via the email address on my GitHub profile.

Legal

Copyright 2017 Oliver Kuckertz; released under the MIT license.

About

A tiny macOS 10.12 Sierra kernel extension for disabling CS_REQUIRE_LV system-wide

Resources

License

Stars

Watchers

Forks

Packages

No packages published