Add kext codesignatureVerification #264
Conversation
Currently the CodeSigVerifier processor only allows app bundles to have their code signature checked. This expands file types to allow signed kexts to be checked as well.
|
Paging @hjuutilainen |
|
Where are you finding a "naked" kext? They should be inside signed pkgs.... |
|
Santa's pkg isn't signed at present, so I'd need to check their .app bundle and .kext individually. I'm commenting out the relevant part of the recipe for now, and have pinged those folks to see if they could release signed pkgs in the future. |
|
I'm fine with this change. I'd even support the decision to only check file extensions for passing to pkgutil and feed everything else to codesign. At some point I'd like to separate these two kind of signature checks to their own processors but that's a discussion for a whole different PR. |
|
This is resolved in my recipe, we can close this and say 'whenever Hannes is inspired to update the processor he'll do so'. |
Currently the CodeSigVerifier processor only allows app bundles to have the code signature checked. This expands file types to allow signed kexts to be checked as well.