Questions tagged [sip]
The System Integrity Protection (vulgo “rootless”) feature of OS X El Capitan protects critical filesystem areas from root user modification attempts.
128
questions
1
vote
0answers
30 views
Cannot access terminal in recovery mode on M1 Mac
I am trying to follow this tutorial to temporaily disable SIP on my new M1 MacBook Air.
Once I get into recovery mode, instead of seeing a Utilities menu where I can open the terminal, I see a message ...
3
votes
1answer
67 views
Does the SIP still protect against other operating systems?
System Integrity Protection from Apple protects very important parts of the system and is, in my opinion, the main reason a Mac is so secure.
That's why I ask myself the question whenever I boot Linux ...
-1
votes
1answer
84 views
Unable to mount read-write in Big Sur 11.2.2 in Single User Mode
I'm on Big Sur 11.2.2, Single User Mode. When I use /sbin/mount -uw /, it says mount_apfs: volume could not be mounted: Permission denied and failed with 66.
I have read this post. But mount -uw /...
1
vote
1answer
106 views
What is ~/Library/VoiceTrigger/SAT ? Part of Siri?
What is this thing that we're not even allowed to look at?
sudo ls -late@ ~/Library/VoiceTrigger
Password:
ls: SAT: Operation not permitted
total 0
drwxrwxr-x 88 WGroleau staff 2816 Feb 18 15:34 ..
...
1
vote
1answer
38 views
How to always allow any app to do anything / disable Security & Privacy authorization dialogues
Currently on macOS Catalina.
I work in sound design and audio development. I use several Automator-scripts and other workflow applications to control various stuff, and for every new project or when I ...
4
votes
1answer
262 views
Disabled mac os SIP but still can't delete default apps
I'm using mac os 11.2.1 Big Sur. My question concerns using the Terminal utility to delete Apple default apps protected by SIP. I have disabled System Integrity Protection and confirmed that it is off ...
0
votes
1answer
433 views
Virtualbox - Can't install guest additions (Big Sur)
I'm trying to install guest additions on my macOS Big Sur VM, but the installation never has been successful. I always get a triggering "The installation failed" screen. Since Command+R can'...
0
votes
0answers
36 views
How can I protect lock down the hosts file under SIP
I want to prevent myself from modifying the hosts file. I tried to do what was answered here: Protect hosts file , which was:
-disable sip by booting into recovery mode and reboot
-run:
chflags ...
2
votes
1answer
66 views
Can I delete files and folders in /private/var/tmp folder? [closed]
I ran into the situation where using simultaneously Google Drive File Stream (DFS) and Code42 Crashplan and some other Corporate SW like CrowdStrike's Falcon, Bitdefender, etc... which seems are not ...
0
votes
1answer
1k views
Mac Big Sur home folder permissions: Read-only file system when renaming files
UPDATE #2
I was able to successfully rename the files using sed:
for f in *.Rdat; do mv $f $(echo $f | sed "s/PCC-//"); done
UPDATE
I discovered I can rename individual files:
mv 'PCC-ASR-L....
0
votes
0answers
211 views
Cannot set boot-args even with SIP disabled
I have installed macOS Big Sur as a guest system in Parallels Desktop 16. I disabled SIP. However, I'm still unable to change nvram values for boot-args. Is there another security feature that I haven'...
3
votes
1answer
1k views
Local policy error when disabling SIP on Big Sur/M1
I'm trying to disable System Integrity Protection on an M1 Mac.
csrutil disable as well as csrutil authenticated-root disable fail with an error:
csrutil: Failed to update security configuration for &...
2
votes
3answers
328 views
How to prevent even root users from uninstalling or tampering the application on macOS
The aim is to prevent even root users from uninstalling our app on their mac.
Apparently, many security applications have this sort of functionality wherein a user(even with root privilege) can not ...
1
vote
2answers
39 views
Disable gatekeeper notarisation check without disabling SIP
I am running into this issue where MacOS does security checks on new executables over the network. This introduces a significant delay when first running a new executable. It's very annoying when ...
1
vote
1answer
36 views
Attempting to Disable Thunderbolt Extensions on Yosemite 10.10.5
I just started having this issue with my Mid-2014 15" Macbook Pro with Retina display, and I've tried refreshing a few processes and did a factory reset, but am still having the problem appear.
...
2
votes
1answer
118 views
disable SIP on a remote/headless machine running Sierra?
I have a remote 2012 mac mini running Sierra. Long ago I was doing some troubleshooting and had created a secondary copy of the system on the machine. Once I had finished whatever I was doing (which ...
0
votes
0answers
115 views
SafariBookmarksSyncAgent and Safari crash due to library not found
After installing a security update on macOS High Sierra (10.13.6, 17G14019), every 30 seconds, an crash dialog keeps popping up "SafariBookmarksSyncAgent quit unexpectedly”. Also it is not ...
0
votes
1answer
61 views
Restrict super user write access to some files
Is there a way to add folders to the SIP (System Integrity Protection) configurations in order to prevent them to be modified by the root user?
Or any other way not involving System Integrity ...
1
vote
0answers
35 views
Access Raw Disk on Virtualbox with SIP enabled
I was reading the following question and answers but I'm having trouble and hoping someone can help.
I am dual booting Catalina and Windows 10 and would like to boot my Windows disks in Virtual box ...
1
vote
1answer
518 views
'Operation not permitted' accessing SMB Share as root under Catalina
I have a script that copies a file from our server to the local machine. Here is the script and output
+ date
Thu Jun 11 09:16:00 ACST 2020
+ id -un
root
+ pwd
/Volumes/Macintosh HD/backups
+ mkdir /...
0
votes
0answers
106 views
What the heck is going on with Catalina? SIP disabled, sudo mounted -uw etc. Applications folder won't move!
I have googled everything, I am desperate. I have installed Catalina yesterday and tried all the steps here (and more) that were logical to me. The thing is I have the feeling the current version has ...
1
vote
1answer
199 views
How to uninstall mySIMBLHelper service installed by SIMBL for MAC
I wanted to install Atop which required SIMBL to be installed.
Nothing at the process stated that SIMBL 0.7.5 wasn't compatible with Mojave 10.14.
It started to pop confirmation if I want it to ...
0
votes
0answers
170 views
Undeletable Apple Mail “DataVaults” File in Trash
I recently created a "testmail" user for debugging purposes. After solving the problem I had, I wanted to remove the user completely again. I may have made the mistake that I first removed the home ...
1
vote
2answers
554 views
I have disabled SIP, I have read/write permissions with terminal, but not with Finder. What causes this?
System: macOS Catalina 10.15.2
Background: I've been a *nix user for many years. I use a remote Linux server where the root directory is used (i.e. there are folders where users can r/w such as /data ...
0
votes
1answer
28 views
Modifying Transliterator Rules
I'm using the MacOS' Tamil language input tool. However this question can be answered in a generic way.
I am trying to make some changes in the rules under this folder.
/System/Library/Input ...
0
votes
1answer
750 views
macOS Catalina: incorrect permissions on /tmp directory
I've recently initialized my MacBook Pro 10.2 restoring from a TimeMachine Backup. It installed macOS Catalina GM on a Beta (Not sure about that, but now I got version 19B77a (10.15.1).
After this ...
0
votes
0answers
686 views
How to delete /var/folders/xx/xxxxxxxxx when the corresponding user account is deleted?
The user specified tmp path is /var/folders/xx/xxxxxxxxx , which can be got by $TMPDIR. It will be created when creating a new user.
But when I delete the user at System Preferences, choosing Delete ...
2
votes
1answer
765 views
Enable SIP without reboot?
Some time ago, I read somewhere that Apple had decided to provide a way to enable SIP without a recovery reboot. If that’s true, how? It isn’t csrutil enable (at least not on my system).
It would ...
0
votes
0answers
38 views
After upgrading to Catalina `csrutil disable` doesn't seem to work anymore [duplicate]
I just upgraded to Catalina and now the csrutil disable command no longer lets me edit locked folders. I mostly just want to customize the icons for native apps like Finder and Launchpad. I typed in ...
0
votes
0answers
47 views
Disabled SIP, but still can't make changes? [duplicate]
Disabled SIP, but still can't make changes:
sh-3.2# id
uid=0(root) gid=0(wheel) groups=0(wheel),1(dae……
sh-3.2# mkdir PAH-en
mkdir: PAH-en: Read-only file system
sh-3.2# csrutil status
System ...
-2
votes
2answers
90 views
Can we override SIP protection with a symlink?
Suppose I have a .plist that I cannot edit without disabling SIP.
Can I disable SIP once, copy the .plist to a rw-r--r-- file in ~,
replace the original with a symlink to the copy, re-enable SIP and ...
0
votes
1answer
3k views
How to delete system file in Mac OS Catalina 10.15.3?
Can't use sudo command in Terminal for destroy some unused system files. How can I do this? Who have a working answer for this?
0
votes
0answers
129 views
csrutil disable: command not found El Capitan
I was using a SATA HDD running Yosemite on a MBP 2012.
I installed a SSD drive with El Capitan.
I took out the DVD optical drive and replaced it with a drive case for the HDD.
Now when I am running ...
1
vote
0answers
135 views
Reset system file permissions modified by disabling system integrity protection
Is there a way to reset permissions on (and/or fully restore) files protected by System Integrity Protection?
I realize I have had SIP disabled for a while now and I want to make sure system files ...
1
vote
1answer
382 views
How to Get Root Access in Mojave?
I need to copy "Network Diagnostics.app" into the Mojave Core Services library.
Running "csrutil disable" from terminal doesn't work, says you have to run from Recovery OS. I don't know if I have ...
3
votes
0answers
82 views
How to add new dictionaries to /usr/share/dict/
I'm trying to add a new word file to /usr/share/dict/ on macOS Catalina v 10.15.1 and I'm getting:
$ sudo touch /usr/share/dict/mywords
touch: /usr/share/dict/mywords: Operation not permitted
# touch ...
1
vote
1answer
179 views
What is the exact behavior of Catalina verifying app?
By 'verifying' I mean either
an explicit popup of 'Verifying'
or app launch stuck with XProtectService comsuming CPU in background
What I know
An app on local drive with com.apple.quarantine xattr ...
1
vote
1answer
87 views
Install csrutil or new recovery partion on High Sierra volume?
My High Sierra installation did not come with a recovery partition, only internet recovery so I don't have csrutil. It's not in usr/bin, or the base install volume either like many have suggested, ...
0
votes
1answer
742 views
How to change DPI?
I had monitor with scaling settings. They change DPI: (on LG Z27, 4K, via USB-C)
Now I have monitor with resolution settings. They change resolution and make picture worse: (on Aorus FI27Q, 2K, via ...
1
vote
1answer
53 views
Non-Apple-provided files in SIP-protected directories
On my macOS Catalina 10.15.1 system, I think I have some files in SIP-protected directories that were installed by third-party (i.e. non-Apple) software prior to SIP being added to macOS.
Is there ...
10
votes
3answers
21k views
Catalina not allowing to change read/write permissions despite having SIP disabled
Currently Running: macOS Catalina 10.15.1
Issue: Ever since I upgraded to Catalina, macOS is not allowing me to change read and write permissions on system protected files, hence, I am not able to ...
0
votes
0answers
153 views
Excel VBA Macro Grant Access All Files Grayed Out
I have a VBA script that I wrote. It accesses a data file in a Dropbox shared folder using Workbooks.Open FileName. I just updated Excel and now when the script runs it's asking me to grant access, ...
0
votes
1answer
891 views
Can't edit .plist in /System
I would like to edit the following plist file using XCode, so that I can change some screensaver effects.
/System/Library/PrivateFrameworks/Slideshows.framework/Versions/A/Resources/Content/...
0
votes
0answers
84 views
Tradeoffs of disabling SIP (System Integrity Protection) in order to install Sierra on Mac Pro (Early 2009)
Lets say someone wants to upgrade a Mac Pro (Early 2009) to macOS Sierra in order to get core security updates and newer versions of modern software.
Unfortunately this Mac Pro model is not ...
1
vote
0answers
84 views
Access Safari history in `~/Library/` bypassing SIP [duplicate]
I have a Python script which reads the Safari browser history by opening ~/Library/Safari/History.db and parsing the SQLite database.
Unfortunately, on some Macs, the System Integrity Protection ...
1
vote
1answer
1k views
Even as admin, I cannot edit DefaultFonts.plist for Notes.app. What am I doing wrong? [duplicate]
I want to modify DefaultFonts.plist for the Notes application. I've tried a few different ways since what worked on old OS doesn't on 10.14 Mojave:
I've navigated to the file through finder, went to ...
1
vote
1answer
4k views
How do we delete protected apps in Mojave? [duplicate]
News.app, Stocks.app, GarageBand... when you try to delete them, you are forbidden because they are "protected" apps. I tried disabling SIP (System Integrity Protection) and still could not delete ...
0
votes
1answer
2k views
Single User mode (10.13.6) write locked with SIP disabled
In the light of unbricking my 2011 MBPro due to the known dGPU failure, I am following LangLangC's (great!) response/guide in GPU problem - Boot Hangs on Grey Screen; combined with some other threads ...
2
votes
1answer
3k views
Disabling SIP on a mid 2012 Mac Running Sierra 10.12.16
I tried booting my mid 2012 mac (which is running Sierra 10.12.6) in recovery mode and opening the terminal; I would like to disable SIP. As per usual, I typed "csrutil disable", and 'command not ...
1
vote
1answer
6k views
Why do I get “Operation Not Permitted” when I try (as root) to delete a file that does not have the `restricted` flag set
I know about SIP, so when I could not delete a file as root from a Mac running El Capitan, I checked for a restricted flag using ls -lOd and saw that the file had no flags. So why is it that I still ...
