Avast WEBforum

Consumer Products => Avast Mac Security => Topic started by: 86a08302n212 on July 25, 2019, 08:40:11 PM

Title: Unexpectedly asked to approve Avast extension
Post by: 86a08302n212 on July 25, 2019, 08:40:11 PM
I have not made any recent changes to Avast. But today when I booted-up my machine I received a dialog from "Security and Privacy" asking me to approve an Avast system extension.  I realize that this would be normal after performing an install, but I have had Avast installed for several months.

Why would this be happening?

macOS 10.13.6
Avast Security 13.12

Title: Re: Unexpectedly asked to approve Avast extension
Post by: jakub.bednar on July 26, 2019, 01:06:03 PM
Hello,

macOS holds every approved system extension in its protected directory in /Library/StagedExtensions. This folder is covered by System Integrity Protection (SIP) feature and is writeable only to the OS, or to user in a Recovery Mode. So one possible solution is, that you were using your mac in a recovery or single-user mode and made some changes affecting this.

On macOS 10.13. Apple has a bug, that the rights of the staged extensions could sometimes get modified and the KEXTs were failing to load ever since (event after application re-installs). Apple never fixed it in macOS 10.13 and told us to encourage people to upgrade to macOS 10.14 Mojave, where the issue was resolved. From that I induce that macOS 10.13 is sometimes touching these files. It could probably happen, that the OS have somehow dropped your former decision to allow the drivers and that is why you see the dialog now.

Those are the only 2 explanations I can come up with. In standard macOS mode of operation, it is not legally possible for the user or for any application to delete the approvals. For more detailed info, you could probably ask Apple directly.

Kind regards,

Jakub
Title: Re: Unexpectedly asked to approve Avast extension
Post by: 86a08302n212 on July 26, 2019, 09:22:43 PM
@jakub.bednar, thanks for the detailed explanation!