summaryrefslogtreecommitdiffhomepage
path: root/docs
diff options
context:
space:
mode:
authorEmīls Piņķis <emils@mullvad.net>2022-10-18 11:38:06 +0200
committerEmīls Piņķis <emils@mullvad.net>2022-10-20 10:08:44 +0200
commit515dcd598a2a8c837b879ca2810c030c1da1a6e7 (patch)
treec5a152127ac1eec7b3792c28316ecfe82235f36e /docs
parent8e395f0235d994f77d2f0608e1376a6907acdee9 (diff)
downloadmullvadvpn-515dcd598a2a8c837b879ca2810c030c1da1a6e7.tar.xz
mullvadvpn-515dcd598a2a8c837b879ca2810c030c1da1a6e7.zip
Update security docs
Diffstat (limited to 'docs')
-rw-r--r--docs/security.md8
1 files changed, 8 insertions, 0 deletions
diff --git a/docs/security.md b/docs/security.md
index b26e2bf860..9554a1d507 100644
--- a/docs/security.md
+++ b/docs/security.md
@@ -314,6 +314,14 @@ started early enough to prevent leaks. To prevent this, another system unit is
started during early boot that applies a blocking policy that persists until the
`mullvad-daemon` is started.
+
+### macOS
+
+Due to the inability to specify dependencies of system services in `launchd` there is no way to
+ensure that our daemon is started before any other service or program is started. Thus, whilst our
+daemon will start as soon as it possibly can, there's nothing that can be done about the order in
+which launch daemons get started, so some leaks may still occur.
+
## Desktop Electron GUI
The graphical frontend for the app on desktop is an Electron app. This app only ever loads