When I first began using 10.11 El Capitan I had to disable SIP in order to run some stuff, and to avoid some crashes. The crashes were probably likely down to some kext I had leftover from older software installations, etc. Not sure.
Is there a way short of enabling SIP to test to see if I have impermissible kexts or anything else in the protected areas that will gag the machine? I don't really wanna go through tons of booting iterations in the hopes of finding things that hang or crash the machine.
To rephrase, this is not about how to enable or disable SIP, but how to programatically or automate a test to determine status of SIP.