[Resolved] Any vulnerability risk if I disable CoreStorage?

[camelia]

Deep Freeze doesn't install if I do not disable CoreStorage.

Is there any vulnerability risk if I disable it?

Thanks
Camelia

 

[alexclst]

There should be nothing that requires CoreStorage to be off. Since it is a low-level technology (that is also completely gone I believe on SSD Macs running High Sierra and thus APFS, which usurped what CoreStorage did) there should not be any app that requires it be turned off. In fact, if you’re using any Mac with a Fusion Drive, or with FileVault 2 on HFS+ based Macs turned on, these technologies use CoreStorage, and so you cannot turn it off without disabling the other features (note that you cannot disable Fusion Drive at all).

On any other storage device (including internal Mac storage) that may have CoreStorage turned on you could disable it, but doing so may erase the device, depending on what way you use to disable CoreStorage.

Are you sure that you don’t mean System Integrity Protection? If that is what you meant there is definitely significant security risks to turning that off. But in and of itself, turning off CoreStorage isn’t a security risk. Maybe turning off features that are built on it (ie FileVault 2) is, but not the basic technology.

 

[DeltaMac]

Maybe....
Faronics (the folks that sell Deep Freeze) say that CoreStorage volumes have to be reverted before installing Deep Freeze.
https://faronics.kayako.com/Knowled...lling-deep-freeze-mac-on-core-storage-volumes.
(reverting is removing the core storage virtual drives, so that would mostly be the same effect as turning CoreStorage off.)
Also, Deep Freeze cannot be installed on a Fusion drive, which would also need to be reverted. That's not always something that the typical user would want (or need).
And, Deep Freeze can't be used with an AFPS-format drive, which pretty much prevents its use on a lot of Macs running High Sierra.

I don't think you can connect all that to any additional vulnerability, just by reverting CoreStorage volumes.
But, you would lose whatever benefits are derived from using the CoreStorage technology

 

[camelia]

There should be nothing that requires CoreStorage to be off. Since it is a low-level technology (that is also completely gone I believe on SSD Macs running High Sierra and thus APFS, which usurped what CoreStorage did) there should not be any app that requires it be turned off. In fact, if you’re using any Mac with a Fusion Drive, or with FileVault 2 on HFS+ based Macs turned on, these technologies use CoreStorage, and so you cannot turn it off without disabling the other features (note that you cannot disable Fusion Drive at all).

On any other storage device (including internal Mac storage) that may have CoreStorage turned on you could disable it, but doing so may erase the device, depending on what way you use to disable CoreStorage.

Are you sure that you don’t mean System Integrity Protection? If that is what you meant there is definitely significant security risks to turning that off. But in and of itself, turning off CoreStorage isn’t a security risk. Maybe turning off features that are built on it (ie FileVault 2) is, but not the basic technology.

Deep Freeze Mac and High Sierra Support for APFS Volumes
https://faronics.kayako.com/Knowled...-mac-and-high-sierra-support-for-apfs-volumes

Maybe....
Faronics (the folks that sell Deep Freeze) say that CoreStorage volumes have to be reverted before installing Deep Freeze.
https://faronics.kayako.com/Knowled...lling-deep-freeze-mac-on-core-storage-volumes.
(reverting is removing the core storage virtual drives, so that would mostly be the same effect as turning CoreStorage off.)
Also, Deep Freeze cannot be installed on a Fusion drive, which would also need to be reverted. That's not always something that the typical user would want (or need).
And, Deep Freeze can't be used with an AFPS-format drive, which pretty much prevents its use on a lot of Macs running High Sierra.

I don't think you can connect all that to any additional vulnerability, just by reverting CoreStorage volumes.
But, you would lose whatever benefits are derived from using the CoreStorage technology

What are those benefits derived from using the CoreStorage technology?

Thanks

Came

MBP 13" Mid 2012 Intel Core i5 2.5 GHZ 4 GB Intel HD Graphics 4000 1536 MB

 

[DeltaMac]

The benefits would be those provided by the CoreStorage technology. Sorry about answering in circles, but the situation with CoreStorage depends on some pretty cryptic stuff (to me, anyway), and there may be difficulties that Apple needs to support better from their end - support to developers with what are probably private APIs. (I don't pretend to understand this stuff, I just do searches and read a lot )
Such as:

Core Storage is the basis for Apple's Fusion Drive technology,[2] which presents several partitions on multiple drives as a single logical volume. It does this by using tiered storage, whereby it keeps the most frequently used blocks on the fastest storage device in the pool, which is by default, an SSD.

Deep Freeze developers may be waiting to see what direction Apple will be taking with CoreStorage.
Or, it's related to the same issues that Disk Repair software faces with trying to keep up with Apple's APFS format, which is another extension of CoreStorage - and also not yet supported by Deep Freeze.
My take on this is that if you have either a Fusion drive, or any Mac using High Sierra on an SSD (which would have a drive formatted to APFS for High Sierra), then you will not currently be able to install or use Deep Freeze.
The support doc that you posted says that High Sierra and Deep Freeze IS supported, if High Sierra is NOT installed on an SSD. That means spinning hard drive, which is a real drag (literally!) on any Mac running High Sierra on a HDD.
Maybe you could contact Faronics support for more current information about their products... Maybe they will be announcing updates sometime in the future that will successfully provide the support, without the pain

 

[camelia]

The benefits would be those provided by the CoreStorage technology. Sorry about answering in circles, but the situation with CoreStorage depends on some pretty cryptic stuff (to me, anyway), and there may be difficulties that Apple needs to support better from their end - support to developers with what are probably private APIs. (I don't pretend to understand this stuff, I just do searches and read a lot )
Such as:


Deep Freeze developers may be waiting to see what direction Apple will be taking with CoreStorage.
Or, it's related to the same issues that Disk Repair software faces with trying to keep up with Apple's APFS format, which is another extension of CoreStorage - and also not yet supported by Deep Freeze.
My take on this is that if you have either a Fusion drive, or any Mac using High Sierra on an SSD (which would have a drive formatted to APFS for High Sierra), then you will not currently be able to install or use Deep Freeze.
The support doc that you posted says that High Sierra and Deep Freeze IS supported, if High Sierra is NOT installed on an SSD. That means spinning hard drive, which is a real drag (literally!) on any Mac running High Sierra on a HDD.
Maybe you could contact Faronics support for more current information about their products... Maybe they will be announcing updates sometime in the future that will successfully provide the support, without the pain

Thank you, I will ask to Deep Freeze developers

Came