Comment by swiftcoder
10 hours ago
The whole UNIX certified thing is a bit odd to start with, but those addendums are really just saying that because the UNIX compliance tests are thoroughly stuck in the past, a bunch of security measures (that users expect to exist on modern systems) have to be disabled to run the test suite.
Yup. And why is UUCP still in there? I mean, yes I have used it, so far back that the docs were written in Quenya. But requiring it now?
Btw, MacOS 27 (the current version) still has UUCP.
SIP is not some irrelevant detail, nor is it an obviously good "modern security practice". A system that the hardware owner cannot modify is not really on the same wavelength as traditional UNIX.
The hardware owner can modify it all they want, disable SIP. For a large swath of average and non-average users that will not be modifying the closed-source OS they're running, it is obviously good.
Traditional UNIX is does not mean having an open source core you're intended to tinker with. Traditional UNIX was entirely proprietary, connected with well-defined text-based interfaces. This is entirely orthogonal to user control and manipulation of the OS.
Also worth keeping in mind that macOS is intended for use with commercial third party software that’s repeatedly been proven untrustworthy, doing things like prodding system internals and installing dodgy kernel extensions where neither is warranted.
SIP is as much defense from the likes of Adobe and Google as it is from more traditional malware.
For now SIP can be disabled (on mac, not of course on iOS that is completely closed) but I wonder for how much. It's clear that the desire of Apple is to make macOS a closed system like iOS, installing third party software outside the AppStore is more and more difficult, with Gatekeeper that asks you to enter the system settings and warn about "potential insecure stuff" each time you want to run an application downloaded from the internet not signed by Apple (yes I know that if you disable SIP you can get rid of Gatekeeper as well).
I think that piece by piece Apple wants to go into direction of making macOS just a desktop version of iOS, that is closed and impossible to modify. They will use of course security as an excuse, the practical thing is that with iOS they succeeded because they went to the market with an OS that was already closed, but making users accept that in new version downloading a software from the internet and installing it it's no longer possible takes time. But they are getting there soon to me.
Traditional UNIX was entirely proprietary, with source you're intended to tinker with.
AT&T was forbidden by its consent decree from productizing Unix. Licensees received the source code, on an as-is basis, with no official support from AT&T.
3 replies →