# Mach Mach is the kernel architecture lineage that supplies major low-level facilities within Apple’s [[XNU]] hybrid kernel, including interprocess communication, tasks and threads, virtual memory, scheduling primitives, and exception handling. ## Role in macOS Modern macOS does not run a standalone Mach microkernel. XNU combines Mach facilities with BSD-derived process, networking, and security components and I/O Kit driver infrastructure. ## Evidentiary boundary Changing installer files, bypassing [[System Integrity Protection]], or persisting a privileged helper does not by itself rewrite Mach message routing or kernel control logic. A Mach-level claim requires kernel-specific evidence such as altered kernel collections, memory exploitation, modified source or binaries, or verified behavior inside kernel authority. ## Relationships [[XNU]] · [[Linux Kernel]] · [[System Privilege]] · [[InstallESD.dmg]] · [[Foundational Persistence]]. ## Source [[InstallESD.dmg#What was not established|InstallESD.dmg — what was not established]].