BlockBlock with ES API as System Extension

[ivwang]

Hi,

As BlockBlock 1.x has been moved to Endpoint Security framework and in WWDC20 Apple promises additional protections when using ES as System Extension, is there also plan to migrate current BlockBlock LaunchDaemon to System Extension for those "free" anti-tempering measures provided by Apple, and pointed out by Trail of Bits's Sinter?

Thanks

[hazcod]

Would love to see this as wel, any plans for this @objective-see ?

[objective-see]

This would be a great feature 🤔 ...I'll put in on the roadmap!