Skip to content

Add ClearanceKit to security apps#1085

Open
craigjbass wants to merge 1 commit intoserhii-londar:masterfrom
craigjbass:add-clearancekit
Open

Add ClearanceKit to security apps#1085
craigjbass wants to merge 1 commit intoserhii-londar:masterfrom
craigjbass:add-clearancekit

Conversation

@craigjbass
Copy link
Copy Markdown

Proposed Changes

ClearanceKit — File-access control for macOS that protects sensitive user data (SSH keys, credentials, messages, browser cookies) from supply-chain attacks. Intercepts file-system operations via Endpoint Security and enforces code-signing-based policies, so a trojanised npm package or compromised build tool is denied access even if it runs under your user account.

Key features:

  • Policies bind to cryptographic signing identities rather than file hashes, surviving software updates indefinitely
  • Maintains a live in-memory process tree with cached ancestor chains, enabling ancestry-aware policy rules
  • Ships with built-in presets for common apps (Signal, Notes, Contacts, Discord)
  • GUI for real-time denied access visibility and one-click allow rule creation
  • Supports MDM-managed policy delivery for enterprise deployment

Category: Security
Language: Swift

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant