From 07c34349157158c3f60fc59f598c5fff6814e0b8 Mon Sep 17 00:00:00 2001 From: mfwmyfacewhen <94880365+mfwmyfacewhen@users.noreply.github.com> Date: Wed, 9 Aug 2023 03:09:40 -0500 Subject: [PATCH] change allow applications downloaded from setting to be more accurate --- docs/os/macos-overview.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/os/macos-overview.md b/docs/os/macos-overview.md index 2f98c7a7..8bf8a221 100644 --- a/docs/os/macos-overview.md +++ b/docs/os/macos-overview.md @@ -115,9 +115,9 @@ Decide whether you want personalized ads based on your usage. ##### Security -Apps from the App Store are subject to stricter security guidelines, such as stricter sandboxing. If the only apps you need are available from the App Store, change the **Allow applications downloaded from** setting to **App Store** to prevent accidentally running other apps. This is a good option particularly if you are configuring a machine for other, less technical users such as children. +Apps from the App Store are subject to stricter security guidelines, such as stricter sandboxing. If the only apps you need are available from the App Store, change the **Allow applications downloaded from** setting to **App Store**. -If you choose to also allow applications from identified developers, be careful about the apps you run and where you obtain them. +Be aware that this setting can be trivially bypassed; any random binary can be run whether this setting is enabled or not. ##### FileVault