[HOW TO] OpenCore 0.7.1 > 0.7.2 differences

I recommend to read the message from vit9696 with the summary of the work done during the month of July.

0.7.2 version brings OpenCore with fewer changes than we have seen in previous versions. Still, there have been more than 20 builds with some major modifications, especially in regards to bugs and security:

  • Keyboard not responding in Windows BitLocker

  • Handling libraries and tracking errors when compiling

  • Removing unwanted spaces in CPU information strings

  • SMBIOS data update

  • Security improvements (changes in Apple Secure Boot model and APFS driver).

config.plist

  • Misc > Security > SecureBootModel (String): new value added (x86legacy), this is the recommended value for Monterey on Macs and Hacks without a T2 chip for better security and compatibility. Previously, the recommended value was Default, equivalent to j137 (iMacPro1,1, December 2017, minimum macOS 10.3.2), this value must be used in macOS 10.15 and earlier. j137 does not work with Monterey.  (easy way is “disabled” it)

  • UEFI > AppleInput > GraphicsInputMirroring (boolean): This is to prevent keyboard input from not working in graphics-based applications such as Windows BitLocker that use non-Apple key input methods even when an AppleEvent key handler (e.g. CrScreenshotDxe.efi) is active. The recommended setting on all hardware is true.An interesting discussion about this is available on OpenCore bug tracker: OpenCore: Can’t use usb keyboard on Windows BitLocker recovery menu.

  • UEFI > APFS: Increased default APFS MinDate and MinVersion to macOS Big Sur for better security. These keys are the minimal allowed APFS driver date and version to be loaded.

Examples:-

MinDate and MinVersion 0 is default (currently Big Sur), leave this value if you are using Big Sur or Monterey-

MinDate=20210508 and MinVersion=1677120009000000 is for Big Sur 11.4 (20F71)-

MinDate=20200306 and MinVersion=1412101001000000 is for Catalina 10.15.4 (19E287)-

MinDate=20190820 and MinVersion=945275007000000 is for Mojave 10.14.6 (18G103)-

MinDate and MinVersion -1 is disabled (not recommended, but the easiest).

It’s required to change MinDate and MinVersion in the APFS section for macOS versions older than Big Sur.

Kexts

Some kexts have been modified, it is recommended to use the most recent versions. They all have internal improvements, here only significant changes are commented:

  • AppleALC (Lilu boot args support)

  • CpuTscSync (Monterey support)

  • FeatureUnlock (Monterey support)

  • Lilu (improved 32-bit performance)

  • MacHyperVSupport (Monterey support)

  • RestrictEvents (improved CPU detection, MacPro7,1 UI in About his Mac, better compatibility with macOS 10.15 and older)

  • UEFIGraphicsFB (first version, basic display output without hardware acceleration on generic hardware)

  • VirtualSMC (Monterey support)

  • WhateverGreen (improved iGPU detection, updated documentation, better device-id spoofing support for AMD cards letting newer RX 6900 GPUs run without problems).

2 评论

  1. A message from vit9696

    With the vacation season ongoing we continue to deliver minor updates to all the products improving overall stability and compatibility.

    We understand the importance of security, and this is why all our products are built with security in mind. With this release OpenCore becomes even more tamper resistant by introducing stack canary support thanks to @MikhailKrichanov. Furthermore, we fixed macOS 12 Apple Secure Boot compatibility. As a side measure, we deprecated Apple Secure Boot support for macOS 10.15 and older with the default preferences. The primary reason is due to these operating systems not having advanced protective measures such as root volume authentication like in macOS 11 and above. To continue using Apple Secure Boot with older operating systems one will need to specify j137 in the SecureBootModel parameter, yet this value will not work with macOS 12. Similarly to Apple Secure Boot, APFS driver verification requirements were also bumped to macOS 11 and newer, and thus require one to change MinDate and MinVersion in the APFS section if older macOS versions need to be launched.

    On the kernel side @Goldfish64 pioneered with 32-bit kernel extension support, expanding Lilu, VirtualSMC, and SMCBatteryManager compatibility to macOS 10.4 and above. We will continue to expand older macOS compatibility to help the developers test their software on various configurations. WhateverGreen got device-id spoofing support for AMD cards, letting newer RX 6900 GPUs run without a hassle. RestrictEvents became more configurable and received minor enhancements for better compatibility with macOS 10.15 and older.

    — Vit

    Changelogs

    OpenCore 0.7.2

    Fixed OSBundleLibraries/OSBundleLibaries64 handling
    Added GraphicsInputMirroring to fix lost keystrokes in some non-Apple graphical UEFI apps
    Added support for stack canaries (security cookies / stack guards)
    Fixed unintialised memory access in AudioDxe causing audio playback failure
    Changed Default Apple Secure Boot model to x86legacy for better security and compatibility
    Increased default APFS MinDate and MinVersion to macOS Big Sur for better security
    Updated builtin firmware versions for SMBIOS and the rest
    Improved SSDT-PNLF compatibility with Windows and newer graphics
    Fixed CLANGPDB OpenCore builds by shortening OC magic

发表回复