Questions tagged [sip]

The System Integrity Protection (vulgo “rootless”) feature of OS X El Capitan protects critical filesystem areas from root user modification attempts.

Filter by
Sorted by
Tagged with
0
votes
1answer
55 views

Restrict super user write access to some files

Is there a way to add folders to the SIP (System Integrity Protection) configurations in order to prevent them to be modified by the root user? Or any other way not involving System Integrity ...
1
vote
0answers
22 views

Access Raw Disk on Virtualbox with SIP enabled

I was reading the following question and answers but I'm having trouble and hoping someone can help. I am dual booting Catalina and Windows 10 and would like to boot my Windows disks in Virtual box ...
1
vote
1answer
72 views

'Operation not permitted' accessing SMB Share as root under Catalina

I have a script that copies a file from our server to the local machine. Here is the script and output + date Thu Jun 11 09:16:00 ACST 2020 + id -un root + pwd /Volumes/Macintosh HD/backups + mkdir /...
0
votes
0answers
55 views

What the heck is going on with Catalina? SIP disabled, sudo mounted -uw etc. Applications folder won't move!

I have googled everything, I am desperate. I have installed Catalina yesterday and tried all the steps here (and more) that were logical to me. The thing is I have the feeling the current version has ...
1
vote
1answer
36 views

How to uninstall mySIMBLHelper service installed by SIMBL for MAC

I wanted to install Atop which required SIMBL to be installed. Nothing at the process stated that SIMBL 0.7.5 wasn't compatible with Mojave 10.14. It started to pop confirmation if I want it to ...
0
votes
0answers
52 views

Undeletable Apple Mail “DataVaults” File in Trash

I recently created a "testmail" user for debugging purposes. After solving the problem I had, I wanted to remove the user completely again. I may have made the mistake that I first removed the home ...
1
vote
2answers
182 views

I have disabled SIP, I have read/write permissions with terminal, but not with Finder. What causes this?

System: macOS Catalina 10.15.2 Background: I've been a *nix user for many years. I use a remote Linux server where the root directory is used (i.e. there are folders where users can r/w such as /data ...
0
votes
1answer
26 views

Modifying Transliterator Rules

I'm using the MacOS' Tamil language input tool. However this question can be answered in a generic way. I am trying to make some changes in the rules under this folder. /System/Library/Input ...
0
votes
1answer
235 views

macOS Catalina: incorrect permissions on /tmp directory

I've recently initialized my MacBook Pro 10.2 restoring from a TimeMachine Backup. It installed macOS Catalina GM on a Beta (Not sure about that, but now I got version 19B77a (10.15.1). After this ...
0
votes
0answers
476 views

How to delete /var/folders/xx/xxxxxxxxx when the corresponding user account is deleted?

The user specified tmp path is /var/folders/xx/xxxxxxxxx , which can be got by $TMPDIR. It will be created when creating a new user. But when I delete the user at System Preferences, choosing Delete ...
2
votes
1answer
198 views

Enable SIP without reboot?

Some time ago, I read somewhere that Apple had decided to provide a way to enable SIP without a recovery reboot. If that’s true, how? It isn’t csrutil enable (at least not on my system). It would ...
0
votes
0answers
30 views

After upgrading to Catalina `csrutil disable` doesn't seem to work anymore [duplicate]

I just upgraded to Catalina and now the csrutil disable command no longer lets me edit locked folders. I mostly just want to customize the icons for native apps like Finder and Launchpad. I typed in ...
0
votes
0answers
43 views

Disabled SIP, but still can't make changes? [duplicate]

Disabled SIP, but still can't make changes: sh-3.2# id uid=0(root) gid=0(wheel) groups=0(wheel),1(dae…… sh-3.2# mkdir PAH-en mkdir: PAH-en: Read-only file system sh-3.2# csrutil status System ...
-2
votes
2answers
84 views

Can we override SIP protection with a symlink?

Suppose I have a .plist that I cannot edit without disabling SIP. Can I disable SIP once, copy the .plist to a rw-r--r-- file in ~, replace the original with a symlink to the copy, re-enable SIP and ...
0
votes
1answer
1k views

How to delete system file in Mac OS Catalina 10.15.3?

Can't use sudo command in Terminal for destroy some unused system files. How can I do this? Who have a working answer for this?
0
votes
0answers
55 views

csrutil disable: command not found El Capitan

I was using a SATA HDD running Yosemite on a MBP 2012. I installed a SSD drive with El Capitan. I took out the DVD optical drive and replaced it with a drive case for the HDD. Now when I am running ...
1
vote
0answers
84 views

Reset system file permissions modified by disabling system integrity protection

Is there a way to reset permissions on (and/or fully restore) files protected by System Integrity Protection? I realize I have had SIP disabled for a while now and I want to make sure system files ...
1
vote
1answer
172 views

How to Get Root Access in Mojave?

I need to copy "Network Diagnostics.app" into the Mojave Core Services library. Running "csrutil disable" from terminal doesn't work, says you have to run from Recovery OS. I don't know if I have ...
3
votes
0answers
59 views

How to add new dictionaries to /usr/share/dict/

I'm trying to add a new word file to /usr/share/dict/ on macOS Catalina v 10.15.1 and I'm getting: $ sudo touch /usr/share/dict/mywords touch: /usr/share/dict/mywords: Operation not permitted # touch ...
1
vote
1answer
142 views

What is the exact behavior of Catalina verifying app?

By 'verifying' I mean either an explicit popup of 'Verifying' or app launch stuck with XProtectService comsuming CPU in background What I know An app on local drive with com.apple.quarantine xattr ...
1
vote
1answer
54 views

Install csrutil or new recovery partion on High Sierra volume?

My High Sierra installation did not come with a recovery partition, only internet recovery so I don't have csrutil. It's not in usr/bin, or the base install volume either like many have suggested, ...
0
votes
1answer
109 views

How to change DPI?

I had monitor with scaling settings. They change DPI: (on LG Z27, 4K, via USB-C) Now I have monitor with resolution settings. They change resolution and make picture worse: (on Aorus FI27Q, 2K, via ...
1
vote
1answer
44 views

Non-Apple-provided files in SIP-protected directories

On my macOS Catalina 10.15.1 system, I think I have some files in SIP-protected directories that were installed by third-party (i.e. non-Apple) software prior to SIP being added to macOS. Is there ...
8
votes
2answers
10k views

Catalina not allowing to change read/write permissions despite having SIP disabled

Currently Running: macOS Catalina 10.15.1 Issue: Ever since I upgraded to Catalina, macOS is not allowing me to change read and write permissions on system protected files, hence, I am not able to ...
0
votes
0answers
188 views

Unable to create folder in / in Catalina [duplicate]

I recently upgraded to Catalina. Earlier is used to have multiple /app1 /app2 folders which mounted nfs shares to which applications write. With the Catalina upgrade the /app1 and /app2 are gone. ...
0
votes
0answers
101 views

Excel VBA Macro Grant Access All Files Grayed Out

I have a VBA script that I wrote. It accesses a data file in a Dropbox shared folder using Workbooks.Open FileName. I just updated Excel and now when the script runs it's asking me to grant access, ...
0
votes
1answer
609 views

Can't edit .plist in /System

I would like to edit the following plist file using XCode, so that I can change some screensaver effects. /System/Library/PrivateFrameworks/Slideshows.framework/Versions/A/Resources/Content/...
0
votes
0answers
68 views

Tradeoffs of disabling SIP (System Integrity Protection) in order to install Sierra on Mac Pro (Early 2009)

Lets say someone wants to upgrade a Mac Pro (Early 2009) to macOS Sierra in order to get core security updates and newer versions of modern software. Unfortunately this Mac Pro model is not ...
1
vote
0answers
59 views

Access Safari history in `~/Library/` bypassing SIP [duplicate]

I have a Python script which reads the Safari browser history by opening ~/Library/Safari/History.db and parsing the SQLite database. Unfortunately, on some Macs, the System Integrity Protection ...
1
vote
1answer
1k views

Even as admin, I cannot edit DefaultFonts.plist for Notes.app. What am I doing wrong? [duplicate]

I want to modify DefaultFonts.plist for the Notes application. I've tried a few different ways since what worked on old OS doesn't on 10.14 Mojave: I've navigated to the file through finder, went to ...
1
vote
1answer
3k views

How do we delete protected apps in Mojave? [duplicate]

News.app, Stocks.app, GarageBand... when you try to delete them, you are forbidden because they are "protected" apps. I tried disabling SIP (System Integrity Protection) and still could not delete ...
0
votes
1answer
2k views

Single User mode (10.13.6) write locked with SIP disabled

In the light of unbricking my 2011 MBPro due to the known dGPU failure, I am following LangLangC's (great!) response/guide in GPU problem - Boot Hangs on Grey Screen; combined with some other threads ...
1
vote
1answer
2k views

Disabling SIP on a mid 2012 Mac Running Sierra 10.12.16

I tried booting my mid 2012 mac (which is running Sierra 10.12.6) in recovery mode and opening the terminal; I would like to disable SIP. As per usual, I typed "csrutil disable", and 'command not ...
1
vote
1answer
5k views

Why do I get “Operation Not Permitted” when I try (as root) to delete a file that does not have the `restricted` flag set

I know about SIP, so when I could not delete a file as root from a Mac running El Capitan, I checked for a restricted flag using ls -lOd and saw that the file had no flags. So why is it that I still ...
1
vote
1answer
374 views

In a MacOS Mojave bash script “-w /etc/passwd” is false even for root

An old bash script I have tested to see if a user was root by seeing if /etc/passwd was writeable. In MacOS High Sierra it returned true for root, and false for anyone else. But in macOS Mojave the ...
0
votes
1answer
99 views

chown/chmod/chgrp on Users/____/Library without disabling SIP?

I know how to disable and enable SIP, but is there an easier way to remove ACLs from a user's library? I want to move and/or copy some things from my admin account to my regular account and SIP ...
0
votes
2answers
228 views

Does System Integrity Protection have any effects on OS's besides Mac OS?

If I understand correctly, SIP is a security feature that protects certain folders on Mac OS from modification, even by root users. I don't know how it works on a low level though, and I was ...
1
vote
1answer
833 views

Disable SIP with third-party GPU

I'm running Mojave on a MacPro5,1 (previously 4,1), which requires using an upgraded GPU, and I'm using the Radeon RX580 (which is listed by Apple as supported). I need to disable SIP to enable ...
1
vote
2answers
2k views

Change permisions on /usr and /usr/local to link Homebrew package

How does one change permissions for /usr or /usr/local? I tried doing sudo chmod 775 /usr/local, but it says chmod: Unable to change file mode on /usr/local: Operation not permitted` so I ran ls -l ...
2
votes
1answer
177 views

I have an iMac 11,2 and successfully installed the Mojave Patch

However, I for some reason, after the installation ... my SIP is disabled. I have been trying over and over again to put my computer into Recovery mode, but I keep getting the Prohibitory Symbol ... ...
0
votes
1answer
137 views

Can I rename the “Pictures” folder without “Full Disk Access”?

Our application needs write access to the user's Home directory, specifically to Pictures, Movies, Music, etc., so it can redirect them to our cloud support. But, on Mojave, renaming Pictures (to some ...
7
votes
2answers
995 views

SIP preventing deletion of /opt/local

Ran into the same problem tonight as this question from SO that wasn't fully answered. I'm trying to uninstall an old installation of MacPorts, and run into SIP: mybox:~ me$ sudo rm -rf /opt/local ...
0
votes
0answers
180 views

Are these terminal commands and temporarily disable SIP safe?

Im trying to installed Sophos anti virus on a mac running 10.10.5, but it keeps failing to install, Sophos support have advised i should do the following work flow, which involves running the ...
1
vote
1answer
144 views

Updates impact on /usr with SIP Disabled

I have a very complex application that needs a directory in /usr. By complex, I mean it would take thousands of changes to rid the code of /usr references. It has to be done, but I need a newer OS X ...
8
votes
7answers
4k views

How to run a LaunchAgent that runs a script which causes failures because of System Integrity Protection

After upgrading to Mojave, my rsync based backup script run via a launch agent in ~/Library/LaunchAgents, could no longer read some directories in ~/Library.
0
votes
1answer
100 views

Problem with kernel_task

It's about 3 days that I can't do anything with my macbook air because the kernel_task is eating up the CPU. So I found this but the command csrutil disable/enable doesn't work on the terminal (El ...
5
votes
2answers
11k views

Load untrusted kernel extension in macOS Mojave

The Volta application is installed on my MacBook Pro, running macOS 10.14 Mojave. This app needs a kernel extension to function properly, and said extension does not have the proper code signatures. ...
1
vote
2answers
2k views

GPU-defect Macbook Pro 2011 does not accept csrutil disable anymore (10.13.6)

I have a failing Macbook Pro and have deactivated the discrete GPU by doing something [editors note: help us help you by detailing what modifications you made to deactivate the GPU]. Now on this ...
3
votes
0answers
37 views

Generate coredump file with SIP enabled

I've followed the steps to make coredump enable in my machine (mainly by setting ulimit -c unlimited and allow write permissions for all a+x in /cores folder). However, it seems like It doesn't work ...
2
votes
2answers
2k views

How to start Internet Recovery Mode of El Capitan with multiple OS installed?

Thank you for your time. Here is my problem: A) Goal Start into Mac OS X El Capitan internet recovery mode and temporarily disable System Integrity Protection (SIP) to use (X11 functions of) ...