Questions tagged [sip]

The System Integrity Protection (vulgo “rootless”) feature of OS X El Capitan protects critical filesystem areas from root user modification attempts.

Filter by
Sorted by
Tagged with
0 votes
0 answers
12 views

can automount & /etc/auto_master mistakes breach the read-only filesystem?

My system is Catalina 10.15.6. I've been trying to configure automount to mount a share on my Synology NAS "on demand". It's not going well :) I can't fully retrace my steps, but I'm trying ...
user avatar
  • 3,247
1 vote
2 answers
125 views

Restoring Apple Mobile File Integrity back to default settings (nvram boot-args)

I modified Apple Mobile File Integrity by running the following commands in a Terminal: sudo nvram boot-args="amfi_get_out_of_my_way=1" How do I revert this change and restore the macOS ...
user avatar
  • 11
1 vote
0 answers
37 views

How to get into Recovery mode in MacOS 11.4 **Remotely**(M1)

I need to reboot into recovery mode on a remote Mac machine (M1, 11.4). I found that there are 2 ways to do it: One - By pressing some buttons at startup. Two - By setting the nvram like so: sudo ...
user avatar
1 vote
2 answers
119 views

Error while disabling csrutil on macOS Catalina

I've tried to disable csrutil on Catalina by booting and repeatedly hitting EDIT: cmd+R. I've run the terminal and disabled csrutil. I get the error "failed to modify system integrity ...
user avatar
  • 21
1 vote
0 answers
62 views

Cannot spoof MacOS version disabling SIP

I've been trying to spoof my Mac version because I need to install an app for school that doesn't support Mac OS Mojave. The application does not have a burned in Info.plist file so I cannot modify ...
user avatar
0 votes
0 answers
13 views

Create symlink in root directory / [duplicate]

I want to create a symlink in macOS root directory /. But sudo ln -s /path/to/directory /short just outputs ln: /short: Read-only file system (see here). Is there a solution to bypass this and create ...
user avatar
  • 201
-6 votes
1 answer
96 views

Does FileVault technically require SIP? [closed]

To disable SIP I must disable FileVault. Is there a technical reason that FileVault needs SIP? IIRC I had FileVault enabled and SIP disabled on older versions of OSX.
user avatar
  • 170
1 vote
0 answers
135 views

iotop not working even with SIP disabled

I am trying to run iotop in order to see realtime disk usage stats. I disabled System Integrity Protection for dtrace by booting into Recovery Mode and running csrutil disable csrutil enable --without ...
user avatar
  • 111
0 votes
0 answers
28 views

BigSur and up: How can you stop the Music app from starting to play once bluetooth is connected without disabling System Integrity Protection?

How could the Music app's auto play on the connection of a bluetooth speaker be disabled or sidestepped so that you could not hear music playing; you could not hear music playing and the app would ...
user avatar
0 votes
0 answers
22 views

How to determine whether a file is part of base OS installation?

Is it possible to tell whether a file on my Mac (M1 with OS 12.1) was part of the original OS installation, rather than something I installed myself? I thought I could just see whether the files were ...
user avatar
  • 514
9 votes
2 answers
1k views

How do I get access to `/Applications` from the command line?

I'm new to Monterey, coming from (I think) the last version of OS X before it became macOS -- definitely before this SIP stuff started to make life interesting. I used to be able to say these things $ ...
user avatar
  • 93
1 vote
2 answers
833 views

Mac M1 how to copy dylib file to usr/lib in macOS Big Sur/?

I have a requirement to copy a dylib file to /usr/lib folder. Even though I have disabled csruitl in recovery mode to bypass the SIP. Still I cannot copy this file to the /usr/lib folder. I have also ...
user avatar
  • 111
3 votes
2 answers
592 views

Modify SIP in normally booted system

I have MacBook Pro (2017) with macOS High Sierra (10.13.6). I have SIP and amfi disabled. I want to enable a part / the majority of SIP (e.g. csrutil enable --without fs) without having to reboot into ...
user avatar
  • 1,805
2 votes
0 answers
29 views

How to check system integrity after uninstalling VirtualBox kernel extensions

I recently installed VirtualBox on my Mac. Then it didn't work as I expected so I decided to uninstall it. But apparently VirtualBox installed kernel extensions. I uninstalled VirtualBox with the ...
user avatar
0 votes
0 answers
41 views

Enabling SIP and SSV after modifying Big Sur files

Is it possible to reenable SIP and SSV after changing the icon for finder? Will my disk be bootable?
user avatar
0 votes
0 answers
64 views

How to downgrade AMD graphics kexts on Catalina and boot with SIP fully enabled?

I recently managed to downgrade the AMD graphics drivers for macos Catalina. To my amazement what I tried actually worked, including the performance changes I was hoping to achieve, except the install ...
user avatar
1 vote
1 answer
413 views

Creating a firmlink in /usr on MacOS 10.15 & 11

I cannot disable SIP to make / (root filesystem) writeable in my environment, so I'm trying to figure out how to create a synthetic firmlink in /usr instead. I have no problem creating firmlinks under ...
user avatar
  • 113
1 vote
0 answers
62 views

Operation not permitted - probably not a Full Disk Access issue

I've given both iterm and bash (both bashes - one is from homebrew) Full Disk Access, but I still see: $ find /System/Volumes/Data/private/var/networkd/db cmd output started 2021 Mon Jun 14 10:03:24 ...
user avatar
0 votes
1 answer
52 views

How to delete a copy of a system font

At some point I made copies of all the fonts in the System>Library folder. I would now like to delete those duplicates, which are not in use and are not in a System folder. But macOS (Mojave) won't ...
user avatar
  • 169
0 votes
0 answers
289 views

How to change swap location on macOS versions like Mojave with SIP?

I am using Mobile simulator and virtual machines which memory intensive. There are a few posts on internet about how to change the location of Swap files on macOS versions with System Integrity ...
user avatar
  • 1
2 votes
2 answers
3k views

Cannot access terminal in recovery mode on M1 Mac

I am trying to follow this tutorial to temporaily disable SIP on my new M1 MacBook Air. Once I get into recovery mode, instead of seeing a Utilities menu where I can open the terminal, I see a message ...
user avatar
3 votes
1 answer
183 views

Does the SIP still protect against other operating systems?

System Integrity Protection from Apple protects very important parts of the system and is, in my opinion, the main reason a Mac is so secure. That's why I ask myself the question whenever I boot Linux ...
user avatar
  • 506
-1 votes
1 answer
3k views

Unable to mount read-write in Big Sur 11.2.2 in Single User Mode

I'm on Big Sur 11.2.2, Single User Mode. When I use /sbin/mount -uw /, it says mount_apfs: volume could not be mounted: Permission denied and failed with 66. I have read this post. But mount -uw /...
user avatar
2 votes
1 answer
1k views

What is ~/Library/VoiceTrigger/SAT ? Part of Siri?

What is this thing that we're not even allowed to look at? sudo ls -late@ ~/Library/VoiceTrigger Password: ls: SAT: Operation not permitted total 0 drwxrwxr-x 88 WGroleau staff 2816 Feb 18 15:34 .. ...
user avatar
  • 3,370
2 votes
2 answers
280 views

How to always allow any app to do anything / disable Security & Privacy authorization dialogues

Currently on macOS Catalina. I work in sound design and audio development. I use several Automator-scripts and other workflow applications to control various stuff, and for every new project or when I ...
user avatar
5 votes
1 answer
3k views

Disabled mac os SIP but still can't delete default apps

I'm using mac os 11.2.1 Big Sur. My question concerns using the Terminal utility to delete Apple default apps protected by SIP. I have disabled System Integrity Protection and confirmed that it is off ...
user avatar
  • 53
3 votes
1 answer
10k views

Virtualbox - Can't install guest additions (Big Sur)

I'm trying to install guest additions on my macOS Big Sur VM, but the installation never has been successful. I always get a triggering "The installation failed" screen. Since Command+R can'...
user avatar
3 votes
1 answer
377 views

Can I delete files and folders in /private/var/tmp folder? [closed]

I ran into the situation where using simultaneously Google Drive File Stream (DFS) and Code42 Crashplan and some other Corporate SW like CrowdStrike's Falcon, Bitdefender, etc... which seems are not ...
user avatar
  • 89
0 votes
1 answer
2k views

Mac Big Sur home folder permissions: Read-only file system when renaming files

UPDATE #2 I was able to successfully rename the files using sed: for f in *.Rdat; do mv $f $(echo $f | sed "s/PCC-//"); done UPDATE I discovered I can rename individual files: mv 'PCC-ASR-L....
user avatar
0 votes
0 answers
659 views

Cannot set boot-args even with SIP disabled

I have installed macOS Big Sur as a guest system in Parallels Desktop 16. I disabled SIP. However, I'm still unable to change nvram values for boot-args. Is there another security feature that I haven'...
user avatar
  • 1,805
3 votes
1 answer
7k views

Local policy error when disabling SIP on Big Sur/M1

I'm trying to disable System Integrity Protection on an M1 Mac. csrutil disable as well as csrutil authenticated-root disable fail with an error: csrutil: Failed to update security configuration for &...
user avatar
  • 181
3 votes
4 answers
1k views

How to prevent even root users from uninstalling or tampering the application on macOS

The aim is to prevent even root users from uninstalling our app on their mac. Apparently, many security applications have this sort of functionality wherein a user(even with root privilege) can not ...
user avatar
1 vote
2 answers
194 views

Disable gatekeeper notarisation check without disabling SIP

I am running into this issue where MacOS does security checks on new executables over the network. This introduces a significant delay when first running a new executable. It's very annoying when ...
user avatar
  • 376
1 vote
1 answer
77 views

Attempting to Disable Thunderbolt Extensions on Yosemite 10.10.5

I just started having this issue with my Mid-2014 15" Macbook Pro with Retina display, and I've tried refreshing a few processes and did a factory reset, but am still having the problem appear. ...
user avatar
2 votes
1 answer
393 views

disable SIP on a remote/headless machine running Sierra?

I have a remote 2012 mac mini running Sierra. Long ago I was doing some troubleshooting and had created a secondary copy of the system on the machine. Once I had finished whatever I was doing (which ...
user avatar
  • 2,470
0 votes
1 answer
73 views

Restrict super user write access to some files

Is there a way to add folders to the SIP (System Integrity Protection) configurations in order to prevent them to be modified by the root user? Or any other way not involving System Integrity ...
user avatar
  • 323
1 vote
0 answers
43 views

Access Raw Disk on Virtualbox with SIP enabled

I was reading the following question and answers but I'm having trouble and hoping someone can help. I am dual booting Catalina and Windows 10 and would like to boot my Windows disks in Virtual box ...
user avatar
  • 11
1 vote
1 answer
2k views

'Operation not permitted' accessing SMB Share as root under Catalina

I have a script that copies a file from our server to the local machine. Here is the script and output + date Thu Jun 11 09:16:00 ACST 2020 + id -un root + pwd /Volumes/Macintosh HD/backups + mkdir /...
user avatar
0 votes
0 answers
144 views

What the heck is going on with Catalina? SIP disabled, sudo mounted -uw etc. Applications folder won't move!

I have googled everything, I am desperate. I have installed Catalina yesterday and tried all the steps here (and more) that were logical to me. The thing is I have the feeling the current version has ...
user avatar
1 vote
2 answers
456 views

How to uninstall mySIMBLHelper service installed by SIMBL for MAC

I wanted to install Atop which required SIMBL to be installed. Nothing at the process stated that SIMBL 0.7.5 wasn't compatible with Mojave 10.14. It started to pop confirmation if I want it to ...
user avatar
1 vote
2 answers
860 views

I have disabled SIP, I have read/write permissions with terminal, but not with Finder. What causes this?

System: macOS Catalina 10.15.2 Background: I've been a *nix user for many years. I use a remote Linux server where the root directory is used (i.e. there are folders where users can r/w such as /data ...
user avatar
  • 21
0 votes
1 answer
35 views

Modifying Transliterator Rules

I'm using the MacOS' Tamil language input tool. However this question can be answered in a generic way. I am trying to make some changes in the rules under this folder. /System/Library/Input ...
user avatar
  • 210
0 votes
1 answer
1k views

macOS Catalina: incorrect permissions on /tmp directory

I've recently initialized my MacBook Pro 10.2 restoring from a TimeMachine Backup. It installed macOS Catalina GM on a Beta (Not sure about that, but now I got version 19B77a (10.15.1). After this ...
user avatar
  • 101
0 votes
0 answers
754 views

How to delete /var/folders/xx/xxxxxxxxx when the corresponding user account is deleted?

The user specified tmp path is /var/folders/xx/xxxxxxxxx , which can be got by $TMPDIR. It will be created when creating a new user. But when I delete the user at System Preferences, choosing Delete ...
user avatar
  • 101
2 votes
1 answer
2k views

Enable SIP without reboot?

Some time ago, I read somewhere that Apple had decided to provide a way to enable SIP without a recovery reboot. If that’s true, how? It isn’t csrutil enable (at least not on my system). It would ...
user avatar
  • 3,370
0 votes
0 answers
42 views

After upgrading to Catalina `csrutil disable` doesn't seem to work anymore [duplicate]

I just upgraded to Catalina and now the csrutil disable command no longer lets me edit locked folders. I mostly just want to customize the icons for native apps like Finder and Launchpad. I typed in ...
user avatar
0 votes
0 answers
54 views

Disabled SIP, but still can't make changes? [duplicate]

Disabled SIP, but still can't make changes: sh-3.2# id uid=0(root) gid=0(wheel) groups=0(wheel),1(dae…… sh-3.2# mkdir PAH-en mkdir: PAH-en: Read-only file system sh-3.2# csrutil status System ...
user avatar
  • 3,370
-2 votes
2 answers
110 views

Can we override SIP protection with a symlink?

Suppose I have a .plist that I cannot edit without disabling SIP. Can I disable SIP once, copy the .plist to a rw-r--r-- file in ~, replace the original with a symlink to the copy, re-enable SIP and ...
user avatar
  • 3,370
1 vote
2 answers
4k views

How to delete system file in Mac OS Catalina 10.15.3?

Can't use sudo command in Terminal for destroy some unused system files. How can I do this? Who have a working answer for this?
user avatar
0 votes
0 answers
188 views

csrutil disable: command not found El Capitan

I was using a SATA HDD running Yosemite on a MBP 2012. I installed a SSD drive with El Capitan. I took out the DVD optical drive and replaced it with a drive case for the HDD. Now when I am running ...
user avatar