Lets say someone wants to upgrade a Mac Pro (Early 2009) to macOS Sierra in order to get core security updates and newer versions of modern software.

Unfortunately this Mac Pro model is not officially supported for macOS Sierra. However, there is a patch tool in existence which will update the firmware on the machine that would allow the installation of Sierra.

The problem is that it requires SIP to be permanently disabled.

Setting aside all the [multitudes of] other related security concerns (i.e. "uh, patch tool?")...

Would the security threat of disabling SIP outweigh the added security benefit of OS patches from Apple and new software from 3rd party vendors?

  • 2
    4.1 Mac Pro doesn't need SIP disabled if the firmware update is applied... I'm typing this on a 4,1 running Mojave... with SIP enabled.
    – Tetsujin
    Commented May 31, 2019 at 19:21
  • @Tetsujin That's so awesome to hear. At any point did you disable SIP?
    – gillytech
    Commented May 31, 2019 at 19:30
  • I honestly can't remember. I periodically disable to fiddle with things, but not specifically for updates etc. I've marched this one onwards & upwards since El Capitan without issue. [It has a proper Mac-flashed Metal-capable GPU so I don't have to worry about the blank screen at boot]
    – Tetsujin
    Commented May 31, 2019 at 19:32
  • Tetsujin... just a thought, you ought to make that an answer... Commented May 31, 2019 at 19:54
  • @Tetsujin Ok, noted. Good point on the metal cards also, I'll need to look into that.
    – gillytech
    Commented May 31, 2019 at 21:39


You must log in to answer this question.

Browse other questions tagged .