The goal is to track when kexts are installed and determine whence kexts came. For instance TRIM is disabled for 3rd party drives in OS X Yosemite. To use a utility like Trim Enabler one must disable kext signing globally. WRT to http://www.cindori.org/trim-enabler-and-yosemite/ – specifically:

“It is important to note that the kext-signing setting is global, if you disable it you should be careful to only install system drivers from sources that you trust.”

It occurs this would be a manageable security issue if one can track kext installed when kext signing is turned off. However, 1/ I don’t know how to discern whether/when kexts are being installed, or 2/ who wrote the kexts already in /System/Library/Extensions/ from before, or 3/ if I miss an alert, how to determine after the fact.

1/ Is there some way to get an alert, warning when a kext is being installed? 2/ Is there some way to determine which program installed the kexts already there?

  • I devised a method using an app called Hazel that logs changes and posts alerts when changes happen in designated folders. This isn't a good solution because alerts are transient, so easy to miss, and logs aren't easily searchable. – thepen Jul 14 '15 at 3:17

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.