diff --git a/Changelog.md b/Changelog.md index 81f8cf7da15e4d792e7fe498b186c900d808968e..3ce67af9618183e578194cd7df6493199bade820 100644 --- a/Changelog.md +++ b/Changelog.md @@ -7,6 +7,7 @@ OpenCore Changelog - Fixed `SetApfsTrimTimeout` on macOS 12 (only works when set to zero) - Added script to build qemu recovery images to macrecovery - Fixed selecting `SecureBootModel` on hypervisors (should be `x86legacy`) +- Added kext blocking `Strategy` for prelinked and newer #### v0.7.8 - Updated ocvalidate to warn about insecure `DmgLoading` with secure `SecureBootModel` (already disallowed in runtime) diff --git a/Docs/Configuration.md5 b/Docs/Configuration.md5 index d90a7605be92ea0dd036480891de04cc2d4fdc46..be78b82536f53c14d05d4401e6817a4069250c6e 100644 --- a/Docs/Configuration.md5 +++ b/Docs/Configuration.md5 @@ -1 +1 @@ -63ebe375542ad0f079cc7071555dd405 +f6ed50e7f45236281de511e910ee0305 diff --git a/Docs/Configuration.pdf b/Docs/Configuration.pdf index 2fa9776940d5761eace9c5846b8c6c341fd8f4aa..53f6fa741f59a9735740ec0af40d7187b81cacef 100644 Binary files a/Docs/Configuration.pdf and b/Docs/Configuration.pdf differ diff --git a/Docs/Differences/Differences.pdf b/Docs/Differences/Differences.pdf index 117db958a35746980521e9f6f5f8e1e4a4fe17e6..805e4e4f31d4f07cda6d4c5b7f9df590224188e7 100644 Binary files a/Docs/Differences/Differences.pdf and b/Docs/Differences/Differences.pdf differ diff --git a/Docs/Differences/Differences.tex b/Docs/Differences/Differences.tex index b8a94a536747501a82531021911e8f86c7a4c3cb..0384c8d5b31e4cd7528d4f8e7dfce3bc68be5afd 100644 --- a/Docs/Differences/Differences.tex +++ b/Docs/Differences/Differences.tex @@ -1,7 +1,7 @@ \documentclass[]{article} %DIF LATEXDIFF DIFFERENCE FILE -%DIF DEL PreviousConfiguration.tex Thu Feb 10 15:29:05 2022 -%DIF ADD ../Configuration.tex Thu Feb 10 19:56:56 2022 +%DIF DEL PreviousConfiguration.tex Fri Feb 11 00:24:26 2022 +%DIF ADD ../Configuration.tex Fri Feb 11 10:54:55 2022 \usepackage{lmodern} \usepackage{amssymb,amsmath} @@ -2235,7 +2235,32 @@ blocking. \emph{Note}: Refer to the \hyperlink{kernmatch}{\texttt{Add\ MaxKernel} description} for matching logic. -\end{enumerate} +\DIFaddbegin \item + \texttt{\DIFadd{Strategy}}\\ + \textbf{\DIFadd{Type}}\DIFadd{: }\texttt{\DIFadd{plist\ string}}\\ + \textbf{\DIFadd{Failsafe}}\DIFadd{: }\texttt{\DIFadd{Disable}} \DIFadd{(Forcibly make the kernel driver kmod startup code return failure)}\\ + \textbf{\DIFadd{Description}}\DIFadd{: Determines the behaviour of kernel driver blocking. +} + + \DIFadd{Valid values: +} + + \begin{itemize} + \tightlist + \item \texttt{\DIFadd{Disable}} \DIFadd{--- Forcibly make the kernel driver kmod startup code return failure. + }\item \texttt{\DIFadd{Exclude}} \DIFadd{--- Remove the kernel driver from the kernel cache by dropping plist entry and filling in zeroes. + }\end{itemize} + + \emph{\DIFadd{Note}}\DIFadd{: It is risky to }\texttt{\DIFadd{Exclude}} \DIFadd{a kext that is a dependency of others. +} + + \emph{\DIFadd{Note 2}}\DIFadd{: At this moment }\texttt{\DIFadd{Exclude}} \DIFadd{is only applied to }\texttt{\DIFadd{prelinkedkernel}} \DIFadd{and newer mechanisms. + } + + \emph{\DIFadd{Note 3}}\DIFadd{: In most cases strategy }\texttt{\DIFadd{Exclude}} \DIFadd{requires the new kext to be injected as a replacement. +} + +\DIFaddend \end{enumerate} \subsection{Emulate Properties}\label{kernelpropsemu} diff --git a/Docs/Errata/Errata.pdf b/Docs/Errata/Errata.pdf index 0039f0e9aa0269319c182563c3c414f0b40ff8ea..ab9576895a1927348a94d28d55db8ceac41259b6 100644 Binary files a/Docs/Errata/Errata.pdf and b/Docs/Errata/Errata.pdf differ