Skip alert about a system extension

I have been working on a Network Extension which is System Extension. My app is distributed outside of the App Store.

In my entitlements file I added key app-proxy-provider-systemextension. I sign and notarise the build. Everything works fine except that when the user tries to load the extension for the first time this annoying pop up appears telling to open Security & Privacy preferences to allow the extension.

Is there any way to avoid it? Like set App Sandbox to YES or any other option to add to entitlements or provisioning file. I understand such caution with KEXT. But why to require user to do extra steps with much safer sys extension? Thanks

Accepted Answer

Is there any way to avoid it?

If you are in a managed environment you can auto-allowed the System Extension prompt with the following SystemExtensions payload.

Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com

Matt,

Thank you.

Unfortunately, I am not in a managed environment. But anyway, it is good to know that the alert should always appear without SystemExtensions profile configured and installed and I am not doing something wrong to trigger it.

it is good to know that the alert should always appear without SystemExtensions profile configured and installed and I am not doing something wrong to trigger it.

Yep, when installing a System Extension that alert should always appear asking the user to approve the installation.

Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com
Skip alert about a system extension
 
 
Q