Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ZT] macOS Big Sur or newer need to manually trust #18933

Open
wants to merge 1 commit into
base: production
Choose a base branch
from

Conversation

kyouheicf
Copy link
Contributor

It need to be fixed from Ventura to Big Sur because of this release.

https://developer.apple.com/documentation/macos-release-notes/macos-big-sur-11_0_1-release-notes#Security

Security
New Features

  • macOS Big Sur 11 beta improves system security by requiring an administrator password when a certificate trust settings change is made in the admin trust domain. Running as the root user alone is no longer sufficient to modify certificate trust. User trust domain settings continue to require confirmation by entering the password for the user’s account. This change may affect you if one of the following is true:
    • You have written scripts which call /usr/bin/security add-trusted-cert -d ... as root.
    • Your process runs as root and calls the SecTrustSettingsSetTrustSettings function to trust a certificate.

Ref. security add-trusted-cert asks pas… | Apple Developer Forums

It need to be fixed from Ventura to Big Sur because of this release.

https://developer.apple.com/documentation/macos-release-notes/macos-big-sur-11_0_1-release-notes#Security

>**Security**
>**New Features**
>- macOS Big Sur 11 beta improves system security by requiring an administrator password when a certificate trust settings change is made in the admin trust domain. Running as the root user alone is no longer sufficient to modify certificate trust. User trust domain settings continue to require confirmation by entering the password for the user’s account. This change may affect you if one of the following is true:
>   - You have written scripts which call /usr/bin/security add-trusted-cert -d ... as root.
>   - Your process runs as root and calls the SecTrustSettingsSetTrustSettings function to trust a certificate.

Ref. [security add-trusted-cert asks pas… | Apple Developer Forums](https://forums.developer.apple.com/forums/thread/671582)
@kyouheicf
Copy link
Contributor Author

PCX-15148

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants