NULLGuard icon indicating copy to clipboard operation
NULLGuard copied to clipboard

how do you use this?

Open chrismcfee opened this issue 10 years ago • 2 comments

chrismcfee avatar Aug 17 '15 23:08 chrismcfee

git clone the repository. open the .xcodeproj compile the kext put the kext in /Library/Extensions sudo chmod -R 755 /Library/Extensions sudo chown -R 0:0 /Library/Extensions sudo nvram boot-args=kext-dev-mode=1

kext-dev-mode=1 doesn't worsen the security of OS X 10.10.5. loading unsigned kexts is doable without it for the bad guys, but having someone sign a kext so I can make a simple installer would be better.

== Public Service Announcement == by the way, on twitter, I've suggested to use SUIDGuard instead of NULLGuard, but I've heard there may be a SUIDGuard bypass. haven't seen it myself, but apparently NULLGuard is not vulnerable. so, if you can do the steps above, do them instead of relying just on SUIDGuard. since i am not able to sign this, (I'd be very glad if someone trusted were to send a pull request with a signed build / installer!) it's better to make sure people at least have what is easier to install, since they may just drop the ball completely on self-patching. If you came here to see how to compile & install NULLGuard, then you should probably do so, and possibly get both SUIDGuard and NULLGuard installed. I am not aware of any incompatibility.

kpwn avatar Aug 18 '15 01:08 kpwn

Thank you!

chrismcfee avatar Aug 18 '15 04:08 chrismcfee