Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

mcgroarty

macrumors member
Original poster
Oct 7, 2011
78
27
In modern macOS, the user must explicitly give macOS permission to load extensions signed by a given developer. Once permission is granted, any extension signed by that developer can load.

How does one subsequently *revoke* trust for a publisher?

I've run into an annoying case where DropBox doesn't prompt whether it should load and use the "SmartSync" extension. That extension has poor interactions with Spotlight, antivirus software, and backup software. I want it gone. But even with a fresh install, DropBox installs and loads the extension if a user previously trusted the DropBox signing key.

Similar, I previously used a 30 day evaluation of some Corel software. It installs a kernel extension which turns out to be DRM, although it is misleadingly categorized as an audio driver. I don't want to trust Corel's keys anymore either.
 
Very interesting question. I presumed that the permissions are saved in ~/Library/Application Support/com.apple.TCC/TCC.db , but I couldn't find kexts mentioned in that database.
You could use kextunload to unload the kexts.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.