Pike R. Alpha Posted June 24, 2015 Share Posted June 24, 2015 Never mind. I finally had time to watch https://developer.apple.com/videos/wwdc/2015/?id=706 and it's clear to me now. The setting is stored in nvram. This setting can only be changed in Recovery OS so you need to boot into the Recovery HD setup and launch the security app in the utility menu to change this setting. 3 Link to comment Share on other sites More sharing options...
Micky1979 Posted June 24, 2015 Share Posted June 24, 2015 hi-hi-hi , good find! He speaks fast, I need to watch and listen carefully (I'm Italian). Probably with the next Pandora I can access this resource with Installer also Link to comment Share on other sites More sharing options...
Allan Posted June 24, 2015 Share Posted June 24, 2015 He speaks fast, I need to watch and listen carefully (I'm Italian). I have some difficult for understanding too, so, in this cases i use subtitles or download for watch later (carefully). Link to comment Share on other sites More sharing options...
crazybirdy Posted June 25, 2015 Share Posted June 25, 2015 Guys, can you test this "test boot"? It does not inject rootless=0 nor kext-dev-mode=1 in El Capitan. The test is too see if unsigned kexts are loaded by the DP1 or DP2 as state by someone, so boot using -f or UseKernelCache=No thanks boot.zip // ---------------------------------------------------------------------------------------------------------------------------- This test is for crazybirdy only ------> boot.zip Loading kexts from /Extra/Extensions. Assuming you have /Extra/Extensions but not something like /Extra/Extensions/10.11 (because Chameleon can do that too normally)...otherwise this test is not reliable.. Since we cannot inject kexts in the prelinkedkernel, the test must be made with -f flag like above, does not inject rootless/kext-dev-mode flags, if you need it then write it at boot time. It's a test, no guarantees 10.11.dp2 prelinkedkernel without FakeSMC /Extra/Extensions/FakeSMC.kext + other kexts /System/Library/Extensions/IO80211Family.kext/Contents/PlugIns/AirPortBrcm4360.kext (add id 4350 for wireless) test with above both boot files can not boot to 10.11 with prelinkedkernel, -v only, stop at [IOBluetoothHCIController]......No FakeSMC loading. 1.the first boot file can boot to 10.11 with -v -f, without rootless=0, kext-dev-mode=1. 2.the second boot file can not boot to 10.11 with -v -f, without rootless=0, kext-dev-mode=1, and get kext error with AirPortBrcm4360.kext. FYI Link to comment Share on other sites More sharing options...
joe75 Posted June 25, 2015 Share Posted June 25, 2015 Never mind. I finally had time to watch https://developer.apple.com/videos/wwdc/2015/?id=706 and it's clear to me now. The setting is stored in nvram. This setting can only be changed in Recovery OS so you need to boot into the Recovery HD setup and launch the security app in the utility menu to change this setting. If a setting was in stored nvram you wouldn't need to boot to Recovery to change it.. Link to comment Share on other sites More sharing options...
Slice Posted June 25, 2015 Share Posted June 25, 2015 nvram is already working with Chameleon? Link to comment Share on other sites More sharing options...
Pike R. Alpha Posted June 25, 2015 Share Posted June 25, 2015 If a setting was in stored nvram you wouldn't need to boot to Recovery to change it.. You will have to when writes to NVRAM are blocked. Link to comment Share on other sites More sharing options...
mhaeuser Posted June 25, 2015 Share Posted June 25, 2015 When NVRAM writes are blocked, how will Startup Disk be set? How will the audio volume be stored? And how will bless' bootnext work? Mhmm. Link to comment Share on other sites More sharing options...
Micky1979 Posted June 25, 2015 Share Posted June 25, 2015 When NVRAM writes are blocked, how will Startup Disk be set? How will the audio volume be stored? And how will bless' bootnext work? Mhmm. Probably is limited to some vars only? nvram is already working with Chameleon? nvram is already working with Chameleon? #2614 was fully working for me until Yosemite with latest FileNVRAM. Can't say with El Capitan, not installed yet. Link to comment Share on other sites More sharing options...
Pike R. Alpha Posted June 25, 2015 Share Posted June 25, 2015 When NVRAM writes are blocked, how will Startup Disk be set? How will the audio volume be stored? And how will bless' bootnext work? Mhmm.Look at this: #define CSR_VALID_FLAGS /* Rootless configuration flags */#define CSR_ALLOW_UNTRUSTED_KEXTS (1 << 0) #define CSR_ALLOW_UNRESTRICTED_FS (1 << 1) #define CSR_ALLOW_TASK_FOR_PID (1 << 2) #define CSR_ALLOW_KERNEL_DEBUGGER (1 << 3) #define CSR_ALLOW_APPLE_INTERNAL (1 << 4) #define CSR_ALLOW_UNRESTRICTED_DTRACE (1 << 5) #define CSR_ALLOW_UNRESTRICTED_NVRAM (1 << 6) The last one will block writes to NVRAM in the GM, specifically changes to rootless=[0/1] because Apple said that they cannot trust root to change this setting. They will only allow changes after you boot into Recover OS (from the Recover HD) or they have to depart from this and change it later on, but I don't see that happening. Link to comment Share on other sites More sharing options...
mendietinha Posted June 25, 2015 Share Posted June 25, 2015 can be done by booting from an installer? legacy here, no RP. Link to comment Share on other sites More sharing options...
Micky1979 Posted June 25, 2015 Share Posted June 25, 2015 I have some difficult for understanding too, so, in this cases i use subtitles or download for watch later (carefully). Ha ha I understand everything, but to a certain point I fell asleep ... I need for the 2° round 10.11.dp2 prelinkedkernel without FakeSMC /Extra/Extensions/FakeSMC.kext + other kexts /System/Library/Extensions/IO80211Family.kext/Contents/PlugIns/AirPortBrcm4360.kext (add id 4350 for wireless) test with above both boot files can not boot to 10.11 with prelinkedkernel, -v only, stop at [IOBluetoothHCIController]......No FakeSMC loading. 1.the first boot file can boot to 10.11 with -v -f, without rootless=0, kext-dev-mode=1. 2.the second boot file can not boot to 10.11 with -v -f, without rootless=0, kext-dev-mode=1, and get kext error with AirPortBrcm4360.kext. FYI Thanks, I think this need more greater adroitness Look at this: #define CSR_VALID_FLAGS /* Rootless configuration flags */#define CSR_ALLOW_UNTRUSTED_KEXTS (1 << 0) #define CSR_ALLOW_UNRESTRICTED_FS (1 << 1) #define CSR_ALLOW_TASK_FOR_PID (1 << 2) #define CSR_ALLOW_KERNEL_DEBUGGER (1 << 3) #define CSR_ALLOW_APPLE_INTERNAL (1 << 4) #define CSR_ALLOW_UNRESTRICTED_DTRACE (1 << 5) #define CSR_ALLOW_UNRESTRICTED_NVRAM (1 << 6) The last one will block writes to NVRAM in the GM, specifically changes to rootless=[0/1] because Apple said that they cannot trust root to change this setting. They will only allow changes after you boot into Recover OS (from the Recover HD) or they have to depart from this and change it later on, but I don't see that happening. Perhaps it is still too early and have to wait DP6 or 7, we are only in June. 2 Link to comment Share on other sites More sharing options...
Allan Posted June 25, 2015 Share Posted June 25, 2015 Ha ha I understand everything, but to a certain point I fell asleep ... I need for the 2° round hahahahaha If I stay a long time watching some videos without subtitles in English, I fall asleep too. 1 Link to comment Share on other sites More sharing options...
Pike R. Alpha Posted June 25, 2015 Share Posted June 25, 2015 Perhaps it is still too early and have to wait DP6 or 7, we are only in June. If root can disable rootless then it will be useless. 2 Link to comment Share on other sites More sharing options...
Micky1979 Posted June 25, 2015 Share Posted June 25, 2015 If root can disable rootless then it will be useless. no is normal I would say. They can't stop root, but only user that use sudo? What's on in /etc/sudoers? hahahahaha If I stay a long time watching some videos without subtitles in English, I fall asleep too. Was also late here Link to comment Share on other sites More sharing options...
joe75 Posted June 26, 2015 Share Posted June 26, 2015 can be done by booting from an installer? legacy here, no RP. You will need a Recovery thats created with the install you're working from. 1 Link to comment Share on other sites More sharing options...
mendietinha Posted June 26, 2015 Share Posted June 26, 2015 You will need a Recovery thats created with the install you're working from. thanks, i´ll work on that. Link to comment Share on other sites More sharing options...
Micky1979 Posted June 26, 2015 Share Posted June 26, 2015 it's an app, so probably receive arguments in its "Standard User Defaults" (obj-c class). I want too see witch... 1 Link to comment Share on other sites More sharing options...
Pike R. Alpha Posted June 29, 2015 Share Posted June 29, 2015 The Security Configuration.app sets options/csr-active-config and this property is read/removed/synced by /AppleEFIRuntime.kext/Contents/PlugIns/AppleEFINVRAM.kext/Contents/MacOS/AppleEFINVRAM I also noticed a temporarily property on options/rootless (with a value of "1cat") but it disappeared shortly afterwards. Go check NVRAM vars like com.apple.private.iokit.nvram-csr for the entitlement) 1 Link to comment Share on other sites More sharing options...
mendietinha Posted June 29, 2015 Share Posted June 29, 2015 rootless.png it's an app, so probably receive arguments in its "Standard User Defaults" (obj-c class). I want too see witch... i tried to disable but gave an error. 1 Link to comment Share on other sites More sharing options...
Micky1979 Posted June 29, 2015 Share Posted June 29, 2015 I am waiting for new ssd tomorrow, after I'll do a bit of testing with Recovery HD. Since the RecoveryHD partition can also be on an external disk (Apple have a tool for this, but also my Hera.app is good) I want to see if there's more.... I will create a fake app to receive arguments passed, if any. The Security Configuration.app sets options/csr-active-config and this property is read/removed/synced by /AppleEFIRuntime.kext/Contents/PlugIns/AppleEFINVRAM.kext/Contents/MacOS/AppleEFINVRAMI also noticed a temporarily property on options/rootless (with a value of "1cat") but it disappeared shortly afterwards. Go check NVRAM vars like com.apple.private.iokit.nvram-csr for the entitlement) i tried to disable but gave an error. 1 Link to comment Share on other sites More sharing options...
chris1111 Posted June 29, 2015 Share Posted June 29, 2015 Hi ErmaC Do you please Upgrade the cdboot for El Cap Because not working on DVD Link to comment Share on other sites More sharing options...
Bronya Posted June 29, 2015 Share Posted June 29, 2015 Hi ErmaC Do you please Upgrade the cdboot for El Cap Because not working on DVD Hi ! Try old cdboot from Chameleon-2.0-RC4 for EL Cap ! I fix this for test ! cdboot.zip Link to comment Share on other sites More sharing options...
chris1111 Posted June 29, 2015 Share Posted June 29, 2015 Hi ! Try old cdboot from Chameleon-2.0-RC4 for EL Cap ! I fix this for test ! cdboot.zip Ok thanks Bronya I try I coming Back in 30 Minutes Link to comment Share on other sites More sharing options...
chris1111 Posted June 30, 2015 Share Posted June 30, 2015 boot only on USB dvd-Rwriter and can't find mach_kernel Link to comment Share on other sites More sharing options...
Recommended Posts