sys_patch: Allow KDK-less root patching on Intel iGPUs and Nvidia Kepler #1007
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
As mentioned in the issue #998, macOS Ventura no longer ships on-disk kernel extensions. Instead requiring Kernel Debug Kits to be installed manually. This creates numerous issues including:
AutoPkg-Assets.pkg
)Thus this PR's goal is to try and use Apple's Auxiliary Kernel Collection system (AuxKC), and install kexts to
/Library/Extensions
. This allows for patching without a KDK present, however there are some caveats:kernelmanagerd
currently restricts Apple kexts inside the AuxKC unless they have an explicitAuxiliary
load requirement. OCLP will validate and patch the kext accordinglyThus this PR will only be beneficial for Intel iGPUs and Nvidia Kepler, this should suffice for the majority of our user base however more research will be needed for developing a work-around to KDK's requirement on AMD GCN