HOW APPLE MITIGATES VULNERABILITIES IN INSTALLER SCRIPTS

Summary from the TLDR InfoSec newsletter

Installer Scripts are valuable targets for attackers as they give processes and their children access to areas in the system that are protected by System Integrity Protection. This article details how vulnerabilities have bypassed these protections in the past. It provides an in-depth look at PackageKit, which is designed to eliminate this full class of vulnerabilities.