Questions tagged [sip]
The System Integrity Protection (vulgo “rootless”) feature of OS X El Capitan protects critical filesystem areas from root user modification attempts.
145
questions
0
votes
0
answers
12
views
can automount & /etc/auto_master mistakes breach the read-only filesystem?
My system is Catalina 10.15.6. I've been trying to configure automount to mount a share on my Synology NAS "on demand". It's not going well :)
I can't fully retrace my steps, but I'm trying ...
- 3,247
1
vote
2
answers
125
views
Restoring Apple Mobile File Integrity back to default settings (nvram boot-args)
I modified Apple Mobile File Integrity by running the following commands in a Terminal:
sudo nvram boot-args="amfi_get_out_of_my_way=1"
How do I revert this change and restore the macOS ...
- 11
1
vote
0
answers
37
views
How to get into Recovery mode in MacOS 11.4 **Remotely**(M1)
I need to reboot into recovery mode on a remote Mac machine (M1, 11.4). I found that there are 2 ways to do it: One - By pressing some buttons at startup. Two - By setting the nvram like so:
sudo ...
- 11
1
vote
2
answers
119
views
Error while disabling csrutil on macOS Catalina
I've tried to disable csrutil on Catalina by booting and repeatedly hitting EDIT: cmd+R. I've run the terminal and disabled csrutil.
I get the error "failed to modify system integrity ...
- 21
1
vote
0
answers
62
views
Cannot spoof MacOS version disabling SIP
I've been trying to spoof my Mac version because I need to install an app for school that doesn't support Mac OS Mojave. The application does not have a burned in Info.plist file so I cannot modify ...
- 11
0
votes
0
answers
13
views
Create symlink in root directory / [duplicate]
I want to create a symlink in macOS root directory /.
But
sudo ln -s /path/to/directory /short
just outputs ln: /short: Read-only file system (see here).
Is there a solution to bypass this and create ...
- 201
-6
votes
1
answer
96
views
Does FileVault technically require SIP? [closed]
To disable SIP I must disable FileVault. Is there a technical reason that FileVault needs SIP?
IIRC I had FileVault enabled and SIP disabled on older versions of OSX.
- 170
1
vote
0
answers
135
views
iotop not working even with SIP disabled
I am trying to run iotop in order to see realtime disk usage stats. I disabled System Integrity Protection for dtrace by booting into Recovery Mode and running
csrutil disable
csrutil enable --without ...
- 111
0
votes
0
answers
28
views
BigSur and up: How can you stop the Music app from starting to play once bluetooth is connected without disabling System Integrity Protection?
How could the Music app's auto play on the connection of a bluetooth speaker be disabled or sidestepped so that
you could not hear music playing;
you could not hear music playing and the app would ...
0
votes
0
answers
22
views
How to determine whether a file is part of base OS installation?
Is it possible to tell whether a file on my Mac (M1 with OS 12.1) was part of the original OS installation, rather than something I installed myself?
I thought I could just see whether the files were ...
- 514
9
votes
2
answers
1k
views
How do I get access to `/Applications` from the command line?
I'm new to Monterey, coming from (I think) the last version of OS X before it became macOS -- definitely before this SIP stuff started to make life interesting.
I used to be able to say these things
$ ...
- 93
1
vote
2
answers
833
views
Mac M1 how to copy dylib file to usr/lib in macOS Big Sur/?
I have a requirement to copy a dylib file to /usr/lib folder. Even though I have disabled csruitl in recovery mode to bypass the SIP. Still I cannot copy this file to the /usr/lib folder. I have also ...
- 111
3
votes
2
answers
592
views
Modify SIP in normally booted system
I have MacBook Pro (2017) with macOS High Sierra (10.13.6). I have SIP and amfi disabled. I want to enable a part / the majority of SIP (e.g. csrutil enable --without fs) without having to reboot into ...
- 1,805
2
votes
0
answers
29
views
How to check system integrity after uninstalling VirtualBox kernel extensions
I recently installed VirtualBox on my Mac. Then it didn't work as I expected so I decided to uninstall it. But apparently VirtualBox installed kernel extensions. I uninstalled VirtualBox with the ...
user429748
0
votes
0
answers
41
views
Enabling SIP and SSV after modifying Big Sur files
Is it possible to reenable SIP and SSV after changing the icon for finder? Will my disk be bootable?
0
votes
0
answers
64
views
How to downgrade AMD graphics kexts on Catalina and boot with SIP fully enabled?
I recently managed to downgrade the AMD graphics drivers for macos Catalina. To my amazement what I tried actually worked, including the performance changes I was hoping to achieve, except the install ...
- 1
1
vote
1
answer
413
views
Creating a firmlink in /usr on MacOS 10.15 & 11
I cannot disable SIP to make / (root filesystem) writeable in my environment, so I'm trying to figure out how to create a synthetic firmlink in /usr instead.
I have no problem creating firmlinks under ...
- 113
1
vote
0
answers
62
views
Operation not permitted - probably not a Full Disk Access issue
I've given both iterm and bash (both bashes - one is from homebrew) Full Disk Access, but I still see:
$ find /System/Volumes/Data/private/var/networkd/db
cmd output started 2021 Mon Jun 14 10:03:24 ...
- 151
0
votes
1
answer
52
views
How to delete a copy of a system font
At some point I made copies of all the fonts in the System>Library folder. I would now like to delete those duplicates, which are not in use and are not in a System folder. But macOS (Mojave) won't ...
- 169
0
votes
0
answers
289
views
How to change swap location on macOS versions like Mojave with SIP?
I am using Mobile simulator and virtual machines which memory intensive. There are a few posts on internet about how to change the location of Swap files on macOS versions with System Integrity ...
- 1
2
votes
2
answers
3k
views
Cannot access terminal in recovery mode on M1 Mac
I am trying to follow this tutorial to temporaily disable SIP on my new M1 MacBook Air.
Once I get into recovery mode, instead of seeing a Utilities menu where I can open the terminal, I see a message ...
- 121
3
votes
1
answer
183
views
Does the SIP still protect against other operating systems?
System Integrity Protection from Apple protects very important parts of the system and is, in my opinion, the main reason a Mac is so secure.
That's why I ask myself the question whenever I boot Linux ...
- 506
-1
votes
1
answer
3k
views
Unable to mount read-write in Big Sur 11.2.2 in Single User Mode
I'm on Big Sur 11.2.2, Single User Mode. When I use /sbin/mount -uw /, it says mount_apfs: volume could not be mounted: Permission denied and failed with 66.
I have read this post. But mount -uw /...
- 49
2
votes
1
answer
1k
views
What is ~/Library/VoiceTrigger/SAT ? Part of Siri?
What is this thing that we're not even allowed to look at?
sudo ls -late@ ~/Library/VoiceTrigger
Password:
ls: SAT: Operation not permitted
total 0
drwxrwxr-x 88 WGroleau staff 2816 Feb 18 15:34 ..
...
- 3,370
2
votes
2
answers
280
views
How to always allow any app to do anything / disable Security & Privacy authorization dialogues
Currently on macOS Catalina.
I work in sound design and audio development. I use several Automator-scripts and other workflow applications to control various stuff, and for every new project or when I ...
5
votes
1
answer
3k
views
Disabled mac os SIP but still can't delete default apps
I'm using mac os 11.2.1 Big Sur. My question concerns using the Terminal utility to delete Apple default apps protected by SIP. I have disabled System Integrity Protection and confirmed that it is off ...
- 53
3
votes
1
answer
10k
views
Virtualbox - Can't install guest additions (Big Sur)
I'm trying to install guest additions on my macOS Big Sur VM, but the installation never has been successful. I always get a triggering "The installation failed" screen. Since Command+R can'...
- 33
3
votes
1
answer
377
views
Can I delete files and folders in /private/var/tmp folder? [closed]
I ran into the situation where using simultaneously Google Drive File Stream (DFS) and Code42 Crashplan and some other Corporate SW like CrowdStrike's Falcon, Bitdefender, etc... which seems are not ...
- 89
0
votes
1
answer
2k
views
Mac Big Sur home folder permissions: Read-only file system when renaming files
UPDATE #2
I was able to successfully rename the files using sed:
for f in *.Rdat; do mv $f $(echo $f | sed "s/PCC-//"); done
UPDATE
I discovered I can rename individual files:
mv 'PCC-ASR-L....
0
votes
0
answers
659
views
Cannot set boot-args even with SIP disabled
I have installed macOS Big Sur as a guest system in Parallels Desktop 16. I disabled SIP. However, I'm still unable to change nvram values for boot-args. Is there another security feature that I haven'...
- 1,805
3
votes
1
answer
7k
views
Local policy error when disabling SIP on Big Sur/M1
I'm trying to disable System Integrity Protection on an M1 Mac.
csrutil disable as well as csrutil authenticated-root disable fail with an error:
csrutil: Failed to update security configuration for &...
- 181
3
votes
4
answers
1k
views
How to prevent even root users from uninstalling or tampering the application on macOS
The aim is to prevent even root users from uninstalling our app on their mac.
Apparently, many security applications have this sort of functionality wherein a user(even with root privilege) can not ...
- 173
1
vote
2
answers
194
views
Disable gatekeeper notarisation check without disabling SIP
I am running into this issue where MacOS does security checks on new executables over the network. This introduces a significant delay when first running a new executable. It's very annoying when ...
- 376
1
vote
1
answer
77
views
Attempting to Disable Thunderbolt Extensions on Yosemite 10.10.5
I just started having this issue with my Mid-2014 15" Macbook Pro with Retina display, and I've tried refreshing a few processes and did a factory reset, but am still having the problem appear.
...
- 11
2
votes
1
answer
393
views
disable SIP on a remote/headless machine running Sierra?
I have a remote 2012 mac mini running Sierra. Long ago I was doing some troubleshooting and had created a secondary copy of the system on the machine. Once I had finished whatever I was doing (which ...
- 2,470
0
votes
1
answer
73
views
Restrict super user write access to some files
Is there a way to add folders to the SIP (System Integrity Protection) configurations in order to prevent them to be modified by the root user?
Or any other way not involving System Integrity ...
- 323
1
vote
0
answers
43
views
Access Raw Disk on Virtualbox with SIP enabled
I was reading the following question and answers but I'm having trouble and hoping someone can help.
I am dual booting Catalina and Windows 10 and would like to boot my Windows disks in Virtual box ...
- 11
1
vote
1
answer
2k
views
'Operation not permitted' accessing SMB Share as root under Catalina
I have a script that copies a file from our server to the local machine. Here is the script and output
+ date
Thu Jun 11 09:16:00 ACST 2020
+ id -un
root
+ pwd
/Volumes/Macintosh HD/backups
+ mkdir /...
- 111
0
votes
0
answers
144
views
What the heck is going on with Catalina? SIP disabled, sudo mounted -uw etc. Applications folder won't move!
I have googled everything, I am desperate. I have installed Catalina yesterday and tried all the steps here (and more) that were logical to me. The thing is I have the feeling the current version has ...
1
vote
2
answers
456
views
How to uninstall mySIMBLHelper service installed by SIMBL for MAC
I wanted to install Atop which required SIMBL to be installed.
Nothing at the process stated that SIMBL 0.7.5 wasn't compatible with Mojave 10.14.
It started to pop confirmation if I want it to ...
- 21
1
vote
2
answers
860
views
I have disabled SIP, I have read/write permissions with terminal, but not with Finder. What causes this?
System: macOS Catalina 10.15.2
Background: I've been a *nix user for many years. I use a remote Linux server where the root directory is used (i.e. there are folders where users can r/w such as /data ...
- 21
0
votes
1
answer
35
views
Modifying Transliterator Rules
I'm using the MacOS' Tamil language input tool. However this question can be answered in a generic way.
I am trying to make some changes in the rules under this folder.
/System/Library/Input ...
- 210
0
votes
1
answer
1k
views
macOS Catalina: incorrect permissions on /tmp directory
I've recently initialized my MacBook Pro 10.2 restoring from a TimeMachine Backup. It installed macOS Catalina GM on a Beta (Not sure about that, but now I got version 19B77a (10.15.1).
After this ...
- 101
0
votes
0
answers
754
views
How to delete /var/folders/xx/xxxxxxxxx when the corresponding user account is deleted?
The user specified tmp path is /var/folders/xx/xxxxxxxxx , which can be got by $TMPDIR. It will be created when creating a new user.
But when I delete the user at System Preferences, choosing Delete ...
- 101
2
votes
1
answer
2k
views
Enable SIP without reboot?
Some time ago, I read somewhere that Apple had decided to provide a way to enable SIP without a recovery reboot. If that’s true, how? It isn’t csrutil enable (at least not on my system).
It would ...
- 3,370
0
votes
0
answers
42
views
After upgrading to Catalina `csrutil disable` doesn't seem to work anymore [duplicate]
I just upgraded to Catalina and now the csrutil disable command no longer lets me edit locked folders. I mostly just want to customize the icons for native apps like Finder and Launchpad. I typed in ...
- 1
0
votes
0
answers
54
views
Disabled SIP, but still can't make changes? [duplicate]
Disabled SIP, but still can't make changes:
sh-3.2# id
uid=0(root) gid=0(wheel) groups=0(wheel),1(dae……
sh-3.2# mkdir PAH-en
mkdir: PAH-en: Read-only file system
sh-3.2# csrutil status
System ...
- 3,370
-2
votes
2
answers
110
views
Can we override SIP protection with a symlink?
Suppose I have a .plist that I cannot edit without disabling SIP.
Can I disable SIP once, copy the .plist to a rw-r--r-- file in ~,
replace the original with a symlink to the copy, re-enable SIP and ...
- 3,370
1
vote
2
answers
4k
views
How to delete system file in Mac OS Catalina 10.15.3?
Can't use sudo command in Terminal for destroy some unused system files. How can I do this? Who have a working answer for this?
0
votes
0
answers
188
views
csrutil disable: command not found El Capitan
I was using a SATA HDD running Yosemite on a MBP 2012.
I installed a SSD drive with El Capitan.
I took out the DVD optical drive and replaced it with a drive case for the HDD.
Now when I am running ...
- 1