Additional binary authorization controls

[drduh]

It is more than a few years old at this point and likely needs a complete overhaul.

[beerisgood]

From your guide:

Santa can be used to only allow trusted code execution, or to blacklist known malware from executing on a Mac

This is already an macOS built-in feature called Gatekeeper.
There is no need to increase the attack surface with a external program.

[friadev]

Gatekeeper only covers apps while Santa covers all binaries, so it does provide functionality that isn't there in the base operating system.

[friadev]

Looks like Google Santa is no longer maintained unfortunately.

[drduh]

too bad - has anyone given the fork(s) a chance?

[headmin]

@drduh yes, the whole team left Google and founded a new company - North Pole Security.

The new updated version of Santa (last 2025.3 release beginning of this week) has gained more features and is in active development, with more to come.

https://github.com/northpolesec/santa

[drduh]

that's great news - let's keep this issue open in hope of future contributions detailing its use.