Differences_in_Kernel_Extension_Mac

Differences in drivers, kernel extension, and system extension

Overview

Create drivers, system extensions, and kernel extensions for specific low-level system services.

  • A DriverKit extension (dext) manages the communication between your company’s hardware device and the rest of the system.
  • A system extension implements features that require kernel-level cooperation, such as custom security and network behaviors.
  • A kernel extension (kext) supports any low-level services that cannot be implemented using a dext or system extension.

The System Extensions framework supports a class of kernel-level features that previously required kexts. System extensions run in user space and interact with the kernel to perform specific tasks. For example, an endpoint-security system extension monitors system events for potential security threats.

In macOS 11 and later, the kernel doesn’t load a kext if an equivalent System Extension solution exists. You may continue to use kexts in macOS 10.15 and earlier.


Last modified on 2024-08-15