Signed drivers work in /S/L/E, but not /L/E

[Mike Crawford]

I installed my kernel extension signing certificate just last Friday.
Perhaps I'm doing something wrong.

My understanding is that unsigned extensions must be installed in
/System/Library/Extensions with System Integrity Protection disabled.

I enabled SIP but left the extensions where they were - in /S/L/E.
They work just fine. (There are three extensions in my USB video
driver.)

When I put the signed extensions in /Library/Extensions, none of them load.

Could this be caused by loading the extensions at boot? I'm using the
open source IOProxyVideoFamily. The readme says that graphics drivers
must load during boot.

Thank you for your insight.

Mike


Mike Crawford mdcra...@gmail.com

The Global Computer Employer Index: http://soggy.jobs/computer
(It's not very global yet.)
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-drivers mailing list (Darwin-...@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/darwin-drivers/darwin-drivers-garchive-96018%40googlegroups.com

This email sent to darwin-drivers...@googlegroups.com

[B.J. Buchalter]

> On Nov 13, 2017, at 3:26 PM, Mike Crawford <mdcra...@gmail.com> wrote:
>
> I installed my kernel extension signing certificate just last Friday.
> Perhaps I'm doing something wrong.
>
> My understanding is that unsigned extensions must be installed in
> /System/Library/Extensions with System Integrity Protection disabled.
>
> I enabled SIP but left the extensions where they were - in /S/L/E.
> They work just fine. (There are three extensions in my USB video
> driver.)
>
> When I put the signed extensions in /Library/Extensions, none of them load.

Have you tried

sudo kextutil -t -v <path to kext in /L/E>

what does it tell you about the kext; if there is a signature problem, it should tell you (generally) what is wrong…

when things are OK, you should get something like:

$ sudo kextutil -t -v /Library/Extensions/blahblah.kext/
Defaulting to kernel file '/System/Library/Kernels/kernel'
/Library/Extensions/blahblah.kext appears to be loadable (not including linkage for on-disk libraries).
Loading /Library/Extensions/blahblah.kext.
/Library/Extensions/blahblah.kext successfully loaded (or already loaded).

Best regards,

B.J. Buchalter
Metric Halo
http://www.mhlabs.com