How do I reenable System Integrity Protection, after using csrutil disable
from the Recovery OS?
1 Answer
The opposite of disable is enable, so: csrutil enable
At the present time there is no manual page for csrutil
i.e. man csrutil
doesn't provide any help, however executing the command without an argument displays its internal help as shown below.
$ csrutil
usage: csrutil <command>
Modify the System Integrity Protection configuration. All configuration changes apply to the entire machine.
Available commands:
clear
Clear the existing configuration. Only available in Recovery OS.
disable
Disable the protection on the machine. Only available in Recovery OS.
enable
Enable the protection on the machine. Only available in Recovery OS.
status
Display the current configuration.
netboot
add <address>
Insert a new IPv4 address in the list of allowed NetBoot sources.
list
Print the list of allowed NetBoot sources.
remove <address>
Remove an IPv4 address from the list of allowed NetBoot sources.
$
-
Technically,
csrutil clear
also works. Commented Aug 19, 2016 at 23:17
csrutil enable
, then explain why?