MarzipanPlatter icon indicating copy to clipboard operation
MarzipanPlatter copied to clipboard

Published 20 hours ago • verified publisher icon biscuitehh

Find a better way to deal with AMFI

Open biscuitehh opened this issue 7 years ago • 2 comments

It currently kind of stinks that we have to disable AMFI in order to make iOS Mac apps run on Mojave. One thought I had - we could build a kernel extension that could patch this entitlement out at runtime (SIP would still have to be disabled, but that's ok).

biscuitehh avatar Jun 11 '18 15:06 biscuitehh

Resource for process tracking in the kernel extension level: https://objective-see.com/blog.html#blogEntry9

biscuitehh avatar Jun 11 '18 15:06 biscuitehh

Resource for patching entitlement checks: https://pvieito.com/2016/12/amfid-patching - (note): the MarzipanTool repo does something similar with LLDB breakpoints.

biscuitehh avatar Jun 11 '18 15:06 biscuitehh