Questions tagged [sip]

The System Integrity Protection (vulgo “rootless”) feature of OS X El Capitan protects critical filesystem areas from root user modification attempts.

Filter by
Sorted by
Tagged with
0
votes
0answers
32 views

Excel VBA Macro Grant Access All Files Grayed Out

I have a VBA script that I wrote. It accesses a data file in a Dropbox shared folder using Workbooks.Open FileName. I just updated Excel and now when the script runs it's asking me to grant access, ...
0
votes
1answer
58 views

Can't edit .plist in /System

I would like to edit the following plist file using XCode, so that I can change some screensaver effects. /System/Library/PrivateFrameworks/Slideshows.framework/Versions/A/Resources/Content/...
0
votes
0answers
54 views

Tradeoffs of disabling SIP (System Integrity Protection) in order to install Sierra on Mac Pro (Early 2009)

Lets say someone wants to upgrade a Mac Pro (Early 2009) to macOS Sierra in order to get core security updates and newer versions of modern software. Unfortunately this Mac Pro model is not ...
1
vote
0answers
51 views

Access Safari history in `~/Library/` bypassing SIP [duplicate]

I have a Python script which reads the Safari browser history by opening ~/Library/Safari/History.db and parsing the SQLite database. Unfortunately, on some Macs, the System Integrity Protection ...
1
vote
1answer
568 views

Even as admin, I cannot edit DefaultFonts.plist for Notes.app. What am I doing wrong? [duplicate]

I want to modify DefaultFonts.plist for the Notes application. I've tried a few different ways since what worked on old OS doesn't on 10.14 Mojave: I've navigated to the file through finder, went to ...
0
votes
1answer
2k views

How do we delete protected apps in Mojave?

News.app, Stocks.app, GarageBand... when you try to delete them, you are forbidden because they are "protected" apps. I tried disabling SIP (System Integrity Protection) and still could not delete ...
1
vote
0answers
39 views

Autostarting Postfix on Mojave without disabling SIP

is there a way of automatically starting postfix (on a different port if necessary) using a different plist (if necessary) on Mojave without disabling SIP? I have some very stupid practice ...
0
votes
1answer
731 views

Single User mode (10.13.6) write locked with SIP disabled

In the light of unbricking my 2011 MBPro due to the known dGPU failure, I am following LangLangC's (great!) response/guide in GPU problem - Boot Hangs on Grey Screen; combined with some other threads ...
1
vote
1answer
672 views

Disabling SIP on a mid 2012 Mac Running Sierra 10.12.16

I tried booting my mid 2012 mac (which is running Sierra 10.12.6) in recovery mode and opening the terminal; I would like to disable SIP. As per usual, I typed "csrutil disable", and 'command not ...
0
votes
1answer
2k views

Why do I get “Operation Not Permitted” when I try (as root) to delete a file that does not have the `restricted` flag set

I know about SIP, so when I could not delete a file as root from a Mac running El Capitan, I checked for a restricted flag using ls -lOd and saw that the file had no flags. So why is it that I still ...
1
vote
1answer
288 views

In a MacOS Mojave bash script “-w /etc/passwd” is false even for root

An old bash script I have tested to see if a user was root by seeing if /etc/passwd was writeable. In MacOS High Sierra it returned true for root, and false for anyone else. But in macOS Mojave the ...
0
votes
1answer
62 views

chown/chmod/chgrp on Users/____/Library without disabling SIP?

I know how to disable and enable SIP, but is there an easier way to remove ACLs from a user's library? I want to move and/or copy some things from my admin account to my regular account and SIP ...
0
votes
2answers
159 views

Does System Integrity Protection have any effects on OS's besides Mac OS?

If I understand correctly, SIP is a security feature that protects certain folders on Mac OS from modification, even by root users. I don't know how it works on a low level though, and I was ...
1
vote
1answer
462 views

Disable SIP with third-party GPU

I'm running Mojave on a MacPro5,1 (previously 4,1), which requires using an upgraded GPU, and I'm using the Radeon RX580 (which is listed by Apple as supported). I need to disable SIP to enable ...
1
vote
2answers
929 views

Change permisions on /usr and /usr/local to link Homebrew package

How does one change permissions for /usr or /usr/local? I tried doing sudo chmod 775 /usr/local, but it says chmod: Unable to change file mode on /usr/local: Operation not permitted` so I ran ls -l ...
2
votes
1answer
127 views

I have an iMac 11,2 and successfully installed the Mojave Patch

However, I for some reason, after the installation ... my SIP is disabled. I have been trying over and over again to put my computer into Recovery mode, but I keep getting the Prohibitory Symbol ... ...
0
votes
1answer
111 views

Can I rename the “Pictures” folder without “Full Disk Access”?

Our application needs write access to the user's Home directory, specifically to Pictures, Movies, Music, etc., so it can redirect them to our cloud support. But, on Mojave, renaming Pictures (to some ...
5
votes
2answers
529 views

SIP preventing deletion of /opt/local

Ran into the same problem tonight as this question from SO that wasn't fully answered. I'm trying to uninstall an old installation of MacPorts, and run into SIP: mybox:~ me$ sudo rm -rf /opt/local ...
1
vote
0answers
38 views

Dtrace working but no kernel data can be output?

I have for a long time run as sip -without dtrace to use dtrace and this is fine but a few apps I want to read data from seen to run in kernel mode (Little Snitch has several components for instance). ...
0
votes
0answers
135 views

Are these terminal commands and temporarily disable SIP safe?

Im trying to installed Sophos anti virus on a mac running 10.10.5, but it keeps failing to install, Sophos support have advised i should do the following work flow, which involves running the ...
1
vote
1answer
125 views

Updates impact on /usr with SIP Disabled

I have a very complex application that needs a directory in /usr. By complex, I mean it would take thousands of changes to rid the code of /usr references. It has to be done, but I need a newer OS X ...
5
votes
6answers
2k views

How to run a LaunchAgent that runs a script which causes failures because of System Integrity Protection

After upgrading to Mojave, my rsync based backup script run via a launch agent in ~/Library/LaunchAgents, could no longer read some directories in ~/Library.
0
votes
1answer
65 views

Problem with kernel_task

It's about 3 days that I can't do anything with my macbook air because the kernel_task is eating up the CPU. So I found this but the command csrutil disable/enable doesn't work on the terminal (El ...
5
votes
2answers
7k views

Load untrusted kernel extension in macOS Mojave

The Volta application is installed on my MacBook Pro, running macOS 10.14 Mojave. This app needs a kernel extension to function properly, and said extension does not have the proper code signatures. ...
1
vote
2answers
1k views

GPU-defect Macbook Pro 2011 does not accept csrutil disable anymore (10.13.6)

I have a failing Macbook Pro and have deactivated the discrete GPU by doing something [editors note: help us help you by detailing what modifications you made to deactivate the GPU]. Now on this ...
2
votes
0answers
22 views

Generate coredump file with SIP enabled

I've followed the steps to make coredump enable in my machine (mainly by setting ulimit -c unlimited and allow write permissions for all a+x in /cores folder). However, it seems like It doesn't work ...
2
votes
2answers
779 views

How to start Internet Recovery Mode of El Capitan with multiple OS installed?

Thank you for your time. Here is my problem: A) Goal Start into Mac OS X El Capitan internet recovery mode and temporarily disable System Integrity Protection (SIP) to use (X11 functions of) ...
0
votes
1answer
564 views

How can I override default Python modules with ones I install with pip?

I've run into this issue with PIL and Pillow. I didn't realize PIL was already installed, so I ran: sudo pip install PIL As best I knew, it installed PIL. Then I wrote a program that used a ...
1
vote
1answer
70 views

How can I mark an arbitrary file as Restricted (using SIP)?

I am looking for further information on protecting certain files so they cannot be edited unless the system is rebooted in Recovery mode. Is SIP the direction to go in? What are the steps to make an ...
2
votes
1answer
123 views

Perl library locations, and System Integrity Protection

My system perl seems to have a bunch of cruft left over from previous installations: % which perl /usr/bin/perl % perl -V | perl -ne 'print if /INC/...//' @INC: /Library/Perl/5.18/darwin-...
3
votes
1answer
817 views

Creating a folder in the root of the filesystem results in “Operation not permitted”

The following command: $ sudo mkdir /AppleInternal and entering my password when prompted, results in: mkdir: /AppleInternal: Operation not permitted Is this because of System Integrity Protection? ...
4
votes
2answers
5k views

Black screen with cursor after logging out of guest account on High Sierra

When I log out of my guest account, it gets stuck with a black screen and a cursor that I can move around but can't do anything except do a forced restart. In my searching, I have seen an old ...
1
vote
0answers
80 views

SIP is purging DYLD libraries added by SQLAnywhere17. Need these libraries to develop in flask

I develop in Python 3.6 and Flask. I'm currently working with a SQLAnywhere database and have installed the Python package sqlanydb. I have also installed the SQLAnywhere17 driver for Mac OSX. Up ...
2
votes
1answer
252 views

Downgrade itunes in high sierra

So I need to downgrade itunes to 12.0.1 for a jailbreak (6.1.6 on ipod 4g). Currently, you can't just delete itunes. What would I have to do? My idea is: Disable SIP (boot into recovery mode and ...
1
vote
1answer
123 views

When will SIP shutdown the computer to prevent overheating?

I have a MacBook Pro Early 2015 running macOS High Sierra. I've managed to get it to pretty high temperatures for both the CPU and the GPU. I've managed to get them to at least 100ºC and the computer ...
3
votes
1answer
2k views

Restoring the Keychain Access menu bar item

Like others I have been mourning the loss of the Keychain Access menubar item. In the thread I linked to, the OP him-or-herself proposes a self-described “crude workaround” that involves copying the ...
3
votes
1answer
2k views

What does the command `csrutil clear` do?

When I read the arguments of csrutil it says csrutil clear will erase the existing configuration SIP: csrutil usage: csrutil <command> Modify the System Integrity Protection configuration. All ...
1
vote
1answer
98 views

How does macOS “detect malware downloaded with Safari”?

On Apple's website, the company makes this claim about macOS High Sierra's security features: Can anyone give me more details on the technology that enables macOS to determine if a file downloaded ...
1
vote
0answers
74 views

Monitor accumulated number of bytes written by a process in Terminal?

I need a way to monitor the accumulated total number of bytes written to the disk by a process via the terminal. I've looked around quite a bit, and found several answers either saying to use pv, or ...
3
votes
1answer
115 views

Other than user error, what types of attacks would SIP prevent?

On this site and throughout other Apple enthusiast communities, I often see people strongly advise against disabling System Integrity Protection. This has always struck me as somewhat odd, as SIP did ...
1
vote
4answers
5k views

Problem with “csrutil enable --without debug” on Sierra

I am using a Mac on macOS Sierra 10.12.5. I want to run the app XtraFinder which opens some additional features in Finder. I used to have it on different computer, but when I download it on this one ...
1
vote
0answers
844 views

kernel_task CPU usage with SIP on a MacBookPro8,2 with no battery

Is there any evidence or technical documentation to support the notion that System Integrity Protection can cause excessive use of the CPU by kernel_task in some situation? Background No battery. ...
2
votes
1answer
829 views

System Integrity Protection breaks DYLD_LIBRARY_PATH for python scripts

I have some custom modules that are generated using SWIG that are installed in a a local path eg: catkin_ws/devel/lib/python2.7/site-packages When I try to run a python script that uses one of these ...
2
votes
2answers
4k views

How can I remove a pre-installed application on macOS Sierra

I need to remove one of the pre-installed applications (Safari in my case) from a macOS Sierra system. Yet simply deleting the app, installing 3rd party "cleaning" software or any attempts to delete ...
0
votes
1answer
406 views

Does disabling “System Integrity Protection” in El Cap cause shutdown/restart/logout issues?

I have an older M-Audio Firewire audio interface that I use with my Mid 2011 Mac Mini. It's running OS X El Capitan 10.11.6. M-Audio never made drivers for this version of OS X, so I have to disable "...
1
vote
2answers
637 views

Seeking a “softphone” app for iOS

I'm moving towards IP-telephony and need a SIP-client for my mobile phone. My first choice would've been Linphone, because that's what I use on my desktop, but it disconnects from the provider every ...
1
vote
1answer
345 views

SIP won't stay disabled - I think

I wiped my SSD clean, reinstalled OS X El Capitan, removed corestoreage, and went on to remove SIP using csrutil disable in the command+R recovery environment. (I also tried it from the installation ...
2
votes
0answers
377 views

Kernel Extension Not Loaded

I built a self-made kernel extension (named KAuthTest.kext) and would like to test it out. So in a VM running macOS 10.12.3, I did the followings: disable SIP by running csrutil disable in recovery ...
4
votes
2answers
658 views

macOS System Integrity Protection Configuration

I was looking to lock down the configuration on some macs, and wanted to know if there is any way to change the files and folders that SIP protects. I know it can be disabled, and its current rules ...
8
votes
0answers
452 views

Why does my `rootless.conf` not always affect SIP’s choice of which files get the `restricted` flag treatment?

What sources say Like everyone else’s, my /System/Library/Sandbox/rootless.conf file contains the following entries: $ cat /System/Library/Sandbox/rootless.conf […] /System […] * /...