Questions tagged [sip]
The System Integrity Protection (vulgo “rootless”) feature of OS X El Capitan protects critical filesystem areas from root user modification attempts.
153
questions
0
votes
1
answer
165
views
How do I reload/reinstall a kernel extension driver, solving this error: Filesystem error: Invalid ownership (501:0) should be (0:0)?
For solving a problem with a drive, I had to uninstall/unload an external SSD Samsung driver.
Doing this, was reasonable easy: disable SIP in Recover (csrutil disable), rebooting, sudo kextunload /...,...
- 53
0
votes
0
answers
20
views
iosnoop does not show devices
I have SIP disabled on Catalina. Running iosnoop does not show devices:
sudo iosnoop -e
DEVICE UID PID D BLOCK SIZE COMM PATHNAME
?? 501 5824 R 37998200 262144 com.apple....
- 353
1
vote
1
answer
171
views
Disabling SIP doesn't allow me to edit "protected" files
I wanted to make a small change to a file in a protected directory, so I went into recovery mode and entered csrutil disable. Now rebooted into normal macOS csrutil status returns System Integrity ...
- 221
2
votes
3
answers
1k
views
Installing old printer drivers (Canon Pixma MX850)
I would like to install drivers for MX850 on macOS Ventura.
As expected, upon running the installation package I get prompted with an “incompatibility with current OS” error, which is obvious since ...
- 21
1
vote
0
answers
29
views
iMac will not boot into anything [duplicate]
As the title says, I cannot boot my iMac (late 2012) into anything. I’ve tried everything from booting into Safe Mode, Recovery Mode (and Internet Recovery Mode), doing a diagnostics test (which didn’...
1
vote
1
answer
127
views
How to remove old PDF Services in read-only file system?
I am tidying up my print PDF services (long overdue). But I can't find a way to delete the two "Save to..." PDF services:
They were created by me with Automator probably under Catalina and ...
- 9,722
2
votes
2
answers
494
views
I want to be able to quit Finder but can't edit Finder's Info.plist after disabling SIP
I'm trying to edit /System/Library/CoreServices/Finder.app/Contents/Info.plist on my MacOS Ventura (13.01) to be able to quit Finder (remove from tab switcher):
m@ms-MacBook-Pro ~ % csrutil status ...
- 123
1
vote
1
answer
4k
views
What are risks of disabling SIP for OpenCore Legacy Patcher: UNAUTHENTICATED_ROOT?
In order to keep MacOS updated on older Mac, OpenCore Legacy Patcher needs to lift next System Integrity Protections:
UNAUTHENTICATED_ROOT
UNRESTRICTED_FS
UNTRUSTED_KEXTS
What do they allow and what ...
- 1,348
1
vote
1
answer
84
views
Backup Pictures folder using unison
I've been very successfully using unison to back up my personal data to a remote machine. The problem is that I cannot seem to be using it to back up my pictures as I always get the error
Error in ...
- 128
1
vote
1
answer
684
views
Can't disable System Integrity Protection for auxiliary systems on my Apple Silicon mac: "recovery system is not paired with the required volume"
I have an M1 Mac Mini with three macOS systems installed within the same APFS container on the internal drive: Big Sur, Monterey, and the latest Ventura beta.
If I boot into the recovery environment, ...
- 2,169
2
votes
1
answer
104
views
App reported "in use" that isn't
I downloaded a Catalina installer which can't run because I am already on Monterey. I copied it to an external drive and put the internal copy in the Trash. When I try to empty the Trash, Finder ...
- 4,670
2
votes
0
answers
159
views
Re-enabling csrutil prevents mac from booting after a new apf image mounted [BigSurOS]
Question
How to re-enable csrutil and csrutil authenticated-root and get the mac to load?
Problem
After having mounted a new boot Volume with a small modification to the folder /usr/lib I am unable to ...
- 121
0
votes
1
answer
85
views
Force Music app to sort with prefixes (“The”, “A”, “An”, etc.)
Back in the ol'days In iTunes package, there was a file called SortPrefixes.plist in localisation folders containing several sort prefixes (“The”, “A”, “An”, etc.). Removing them in this file was ...
- 247
1
vote
2
answers
2k
views
Restoring Apple Mobile File Integrity back to default settings (nvram boot-args)
I modified Apple Mobile File Integrity by running the following commands in a Terminal:
sudo nvram boot-args="amfi_get_out_of_my_way=1"
How do I revert this change and restore the macOS ...
- 11
1
vote
0
answers
226
views
How to get into Recovery mode in MacOS 11.4 **Remotely**(M1)
I need to reboot into recovery mode on a remote Mac machine (M1, 11.4). I found that there are 2 ways to do it: One - By pressing some buttons at startup. Two - By setting the nvram like so:
sudo ...
- 11
1
vote
2
answers
2k
views
Error while disabling csrutil on macOS Catalina
I've tried to disable csrutil on Catalina by booting and repeatedly hitting EDIT: cmd+R. I've run the terminal and disabled csrutil.
I get the error "failed to modify system integrity ...
- 31
2
votes
0
answers
277
views
Cannot spoof MacOS version disabling SIP
I've been trying to spoof my Mac version because I need to install an app for school that doesn't support Mac OS Mojave. The application does not have a burned in Info.plist file so I cannot modify ...
- 21
-5
votes
1
answer
259
views
Does FileVault technically require SIP? [closed]
To disable SIP I must disable FileVault. Is there a technical reason that FileVault needs SIP?
IIRC I had FileVault enabled and SIP disabled on older versions of OSX.
- 287
3
votes
0
answers
449
views
iotop not working even with SIP disabled
I am trying to run iotop in order to see realtime disk usage stats. I disabled System Integrity Protection for dtrace by booting into Recovery Mode and running
csrutil disable
csrutil enable --without ...
- 131
0
votes
0
answers
53
views
How to determine whether a file is part of base OS installation?
Is it possible to tell whether a file on my Mac (M1 with OS 12.1) was part of the original OS installation, rather than something I installed myself?
I thought I could just see whether the files were ...
- 554
9
votes
2
answers
4k
views
How do I get access to `/Applications` from the command line?
I'm new to Monterey, coming from (I think) the last version of OS X before it became macOS -- definitely before this SIP stuff started to make life interesting.
I used to be able to say these things
$ ...
- 193
1
vote
2
answers
4k
views
Mac M1 how to copy dylib file to usr/lib in macOS Big Sur/?
I have a requirement to copy a dylib file to /usr/lib folder. Even though I have disabled csruitl in recovery mode to bypass the SIP. Still I cannot copy this file to the /usr/lib folder. I have also ...
- 111
5
votes
2
answers
2k
views
Modify SIP in normally booted system
I have MacBook Pro (2017) with macOS High Sierra (10.13.6). I have SIP and amfi disabled. I want to enable a part / the majority of SIP (e.g. csrutil enable --without fs) without having to reboot into ...
- 2,503
2
votes
0
answers
41
views
How to check system integrity after uninstalling VirtualBox kernel extensions
I recently installed VirtualBox on my Mac. Then it didn't work as I expected so I decided to uninstall it. But apparently VirtualBox installed kernel extensions. I uninstalled VirtualBox with the ...
user429748
1
vote
1
answer
856
views
Creating a firmlink in /usr on MacOS 10.15 & 11
I cannot disable SIP to make / (root filesystem) writeable in my environment, so I'm trying to figure out how to create a synthetic firmlink in /usr instead.
I have no problem creating firmlinks under ...
- 113
1
vote
0
answers
86
views
Operation not permitted - probably not a Full Disk Access issue
I've given both iterm and bash (both bashes - one is from homebrew) Full Disk Access, but I still see:
$ find /System/Volumes/Data/private/var/networkd/db
cmd output started 2021 Mon Jun 14 10:03:24 ...
- 151
0
votes
1
answer
89
views
How to delete a copy of a system font
At some point I made copies of all the fonts in the System>Library folder. I would now like to delete those duplicates, which are not in use and are not in a System folder. But macOS (Mojave) won't ...
- 179
0
votes
0
answers
829
views
How to change swap location on macOS versions like Mojave with SIP?
I am using Mobile simulator and virtual machines which memory intensive. There are a few posts on internet about how to change the location of Swap files on macOS versions with System Integrity ...
- 1
2
votes
2
answers
7k
views
Cannot access terminal in recovery mode on M1 Mac
I am trying to follow this tutorial to temporaily disable SIP on my new M1 MacBook Air.
Once I get into recovery mode, instead of seeing a Utilities menu where I can open the terminal, I see a message ...
- 121
3
votes
1
answer
288
views
Does the SIP still protect against other operating systems?
System Integrity Protection from Apple protects very important parts of the system and is, in my opinion, the main reason a Mac is so secure.
That's why I ask myself the question whenever I boot Linux ...
- 857
0
votes
1
answer
4k
views
Unable to mount read-write in Big Sur 11.2.2 in Single User Mode
I'm on Big Sur 11.2.2, Single User Mode. When I use /sbin/mount -uw /, it says mount_apfs: volume could not be mounted: Permission denied and failed with 66.
I have read this post. But mount -uw /...
- 59
2
votes
1
answer
2k
views
What is ~/Library/VoiceTrigger/SAT ? Part of Siri?
What is this thing that we're not even allowed to look at?
sudo ls -late@ ~/Library/VoiceTrigger
Password:
ls: SAT: Operation not permitted
total 0
drwxrwxr-x 88 WGroleau staff 2816 Feb 18 15:34 ..
...
- 4,670
2
votes
2
answers
1k
views
How to always allow any app to do anything / disable Security & Privacy authorization dialogues
Currently on macOS Catalina.
I work in sound design and audio development. I use several Automator-scripts and other workflow applications to control various stuff, and for every new project or when I ...
5
votes
1
answer
5k
views
Disabled mac os SIP but still can't delete default apps
I'm using mac os 11.2.1 Big Sur. My question concerns using the Terminal utility to delete Apple default apps protected by SIP. I have disabled System Integrity Protection and confirmed that it is off ...
- 53
3
votes
1
answer
14k
views
Virtualbox - Can't install guest additions (Big Sur)
I'm trying to install guest additions on my macOS Big Sur VM, but the installation never has been successful. I always get a triggering "The installation failed" screen. Since Command+R can'...
- 33
3
votes
1
answer
775
views
Can I delete files and folders in /private/var/tmp folder? [closed]
I ran into the situation where using simultaneously Google Drive File Stream (DFS) and Code42 Crashplan and some other Corporate SW like CrowdStrike's Falcon, Bitdefender, etc... which seems are not ...
- 189
0
votes
1
answer
2k
views
Mac Big Sur home folder permissions: Read-only file system when renaming files
UPDATE #2
I was able to successfully rename the files using sed:
for f in *.Rdat; do mv $f $(echo $f | sed "s/PCC-//"); done
UPDATE
I discovered I can rename individual files:
mv 'PCC-ASR-L....
0
votes
0
answers
1k
views
Cannot set boot-args even with SIP disabled
I have installed macOS Big Sur as a guest system in Parallels Desktop 16. I disabled SIP. However, I'm still unable to change nvram values for boot-args. Is there another security feature that I haven'...
- 2,503
4
votes
1
answer
12k
views
Local policy error when disabling SIP on Big Sur/M1
I'm trying to disable System Integrity Protection on an M1 Mac.
csrutil disable as well as csrutil authenticated-root disable fail with an error:
csrutil: Failed to update security configuration for &...
- 191
4
votes
4
answers
2k
views
How to prevent even root users from uninstalling or tampering the application on macOS
The aim is to prevent even root users from uninstalling our app on their mac.
Apparently, many security applications have this sort of functionality wherein a user(even with root privilege) can not ...
- 183
1
vote
2
answers
354
views
Disable gatekeeper notarisation check without disabling SIP
I am running into this issue where MacOS does security checks on new executables over the network. This introduces a significant delay when first running a new executable. It's very annoying when ...
- 476
2
votes
1
answer
143
views
Attempting to Disable Thunderbolt Extensions on Yosemite 10.10.5
I just started having this issue with my Mid-2014 15" Macbook Pro with Retina display, and I've tried refreshing a few processes and did a factory reset, but am still having the problem appear.
...
- 21
2
votes
1
answer
787
views
disable SIP on a remote/headless machine running Sierra?
I have a remote 2012 mac mini running Sierra. Long ago I was doing some troubleshooting and had created a secondary copy of the system on the machine. Once I had finished whatever I was doing (which ...
- 2,731
0
votes
1
answer
85
views
Restrict super user write access to some files
Is there a way to add folders to the SIP (System Integrity Protection) configurations in order to prevent them to be modified by the root user?
Or any other way not involving System Integrity ...
- 353
1
vote
0
answers
55
views
Access Raw Disk on Virtualbox with SIP enabled
I was reading the following question and answers but I'm having trouble and hoping someone can help.
I am dual booting Catalina and Windows 10 and would like to boot my Windows disks in Virtual box ...
- 11
1
vote
2
answers
3k
views
'Operation not permitted' accessing SMB Share as root under Catalina
I have a script that copies a file from our server to the local machine. Here is the script and output
+ date
Thu Jun 11 09:16:00 ACST 2020
+ id -un
root
+ pwd
/Volumes/Macintosh HD/backups
+ mkdir /...
- 111
0
votes
0
answers
184
views
What the heck is going on with Catalina? SIP disabled, sudo mounted -uw etc. Applications folder won't move!
I have googled everything, I am desperate. I have installed Catalina yesterday and tried all the steps here (and more) that were logical to me. The thing is I have the feeling the current version has ...
1
vote
2
answers
678
views
How to uninstall mySIMBLHelper service installed by SIMBL for MAC
I wanted to install Atop which required SIMBL to be installed.
Nothing at the process stated that SIMBL 0.7.5 wasn't compatible with Mojave 10.14.
It started to pop confirmation if I want it to ...
- 21
1
vote
2
answers
1k
views
I have disabled SIP, I have read/write permissions with terminal, but not with Finder. What causes this?
System: macOS Catalina 10.15.2
Background: I've been a *nix user for many years. I use a remote Linux server where the root directory is used (i.e. there are folders where users can r/w such as /data ...
- 21
0
votes
1
answer
43
views
Modifying Transliterator Rules
I'm using the MacOS' Tamil language input tool. However this question can be answered in a generic way.
I am trying to make some changes in the rules under this folder.
/System/Library/Input ...
- 250