At the Mac's future operating system presentation event, macos catalina, Apple brought to the fore the increase of security.
macOS Catalina will be the first operating system of Apple which will have its own volume for system files, and this will be read-only. This change will certainly bring about an improvement in security.
We have tested the future operating system with an upgrade from MacOS Mojave to macOS Catalina Public Beta, and the first thing that attracted our attention was the presence of two separate volumes (virtual partitions on SSD) instead of one. A volume dedicated to the operating system (macOS) and one for the user data (macOS data).
If you bother to see two or three drives instead of one, you must know that they all belong to the same "containter disk"And the free space on your hard drive will not be affected by this change. Practically, the volume dedicated to the operating system is the same as the data container, except that the layout only allows you to read the files. Changing and writing external system files is blocked.
Going back for a while, we see that Apple they repeatedly had a fork with vulnerabilities of MacOS systems. Even though many of the vulnerabilities have not been exploited by malicious people, the American company has been trying to innovate on the security side. So with the launch of macOS El Capitan, Apple introduced "System Integrity Protection (SIP)". A technology designed not allow modification of system files and folders.
SIP limits access to the root user, thus preventing macOS integrity. In spite of these security enhancements, ways have been found to bypass SIP protection and install malicious software that overwrites and modifies system files.
With the transition to macOS Catalina, Apple move the operating system to its own volume and develop a new type of symbolic bidirectional link, named firmlink, managing to make two volumes to integrate and work as one.
macOS Catalina is currently only available in Beta for subscribers from Apple Beta Software Program, following the launch of this year's final version, available for free to all users.