System protection bypass does not work in MacOS 15.1 #65
Description
It seems that Apple no longer allows spctl --add ... at all; this is the documentation from man spctl in MacOS 15.1.0:
DEPRECATED OPTIONS
As of MacOS 15.0, operations that modify the rule database or the global state of the assessment subsystem will no longer be supported.
To add rules with configuration profiles, please see https://developer.apple.com/documentation/devicemanagement/systempolicyrule
To modify the global state with configuration profiles, please see https://developer.apple.com/documentation/devicemanagement/systempolicycontrol
--add Add rule(s) to the system-wide assessment rule database.
And indeed, checking the assessment fails:
% spctl --assess /usr/local/bin/7777
/usr/local/bin/7777: rejected
This does not appear to impact users who already have SP bypassed for 7777, but it will likely impact new installations.