I read the man page, but it's hard for me to understand what the flag does -o killfor the tool codesign. Initially, I interpreted the sentence “Code with the set of death characters set when it loses its identity” means that if you sign the application with the kill flag and then change the application so that it doesn’t sign, then the OS will no longer run the application. That would be nice, and I saw blog posts showing that other people believed this. But the experiment shows that he does not. So what is he doing?
source
share