Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save max-scopp/775632f33756be4d684b50fd826bfa4f to your computer and use it in GitHub Desktop.
Save max-scopp/775632f33756be4d684b50fd826bfa4f to your computer and use it in GitHub Desktop.

Ensure you are able to install apps from non-verified vendors: $ sudo spctl –master-disable

Before Changing up your System, try to quarantine the app (works ~80%): $ sudo xattr -rd com.apple.quarantine /Applications/<My.app>/

DON'T try the CORE KeyGen Patcher, doesn't work since Sierra


Worst case

System Policy Basic Usage:

spctl --assess [--type type] [-v] path ... # assessment
spctl --add [--type type] [--path|--requirement|--anchor|--hash] spec ... # add rule(s)
spctl [--enable|--disable|--remove] [--type type] [--path|--requirement|--anchor|--hash|--rule] spec # change rule(s)
spctl --status | --master-enable | --master-disable # system master switch

Kernel Extension User Consent Usage:

spctl kext-consent <action>

** Modifications only available in Recovery OS **

  • status — Print whether kernel extension user consent is enabled or disabled.
  • enable — Enable requiring user consent for kernel extensions.
  • disable — Disable requiring user consent for kernel extensions.
  • add <team-id> — Insert a new Team Identifier into the list allowed to load kernel extensions without user consent.
  • list — Print the list of Team Identifiers allowed to load without user consent.
  • remove <team-id> — Remove a Team Identifier from the list allowed to load kernel extensions without user consent.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment