Skip to main content

Questions tagged [sip]

The System Integrity Protection (vulgo “rootless”) feature of OS X El Capitan protects critical filesystem areas from root user modification attempts.

Filter by
Sorted by
Tagged with
1 vote
1 answer
95 views

How to remove a file from root directory in macOS?

On my Mac (macOS Sonoma 14.5), I have created a symlink file in the root directory (/) a long time ago. I just noticed that it must have been moved from Mac to Mac by the Migration Assistant, so that ...
not2savvy's user avatar
  • 2,000
0 votes
0 answers
71 views

How to remove system extension on 14.4.1

$ systemextensionsctl list 1 extension(s) --- com.apple.system_extension.network_extension enabled active teamID bundleID (version) name [state] * * DE8Y96K9QP com.cisco.anyconnect.macos....
Anton Tropashko's user avatar
0 votes
1 answer
170 views

List of all entitlements on Apple systems

Is there a list of all entitlements, past and present, recognized on macOS and all other Apple operating systems? Or a list that covers at least half of them? I can't find one anywhere and the ...
Melab's user avatar
  • 1,019
2 votes
1 answer
82 views

Is launchd confined by SIP or AMFI?

Given that signature checks for kernel extensions and executables are both carried out in userspace, this tells me that SIP and the sandbox aren't running when launchd is still the only process ...
Melab's user avatar
  • 1,019
0 votes
1 answer
50 views

Can't remove systems folder from a faulty installation of Mac Catalina

I had Mojave installed on my late 2012 Mac mini, and attempted to install Catalina on it using the internet recovery mode. This install was made to the /Volumes/Local disc, and it failed miserably not ...
holroy's user avatar
  • 157
0 votes
1 answer
313 views

How do I reload/reinstall a kernel extension driver, solving this error: Filesystem error: Invalid ownership (501:0) should be (0:0)?

For solving a problem with a drive, I had to uninstall/unload an external SSD Samsung driver. Doing this, was reasonable easy: disable SIP in Recover (csrutil disable), rebooting, sudo kextunload /...,...
nostromo's user avatar
  • 197
0 votes
0 answers
22 views

iosnoop does not show devices

I have SIP disabled on Catalina. Running iosnoop does not show devices: sudo iosnoop -e DEVICE UID PID D BLOCK SIZE COMM PATHNAME ?? 501 5824 R 37998200 262144 com.apple....
mariano-daniel's user avatar
1 vote
1 answer
223 views

Disabling SIP doesn't allow me to edit "protected" files

I wanted to make a small change to a file in a protected directory, so I went into recovery mode and entered csrutil disable. Now rebooted into normal macOS csrutil status returns System Integrity ...
gurkensaas's user avatar
2 votes
3 answers
2k views

Installing old printer drivers (Canon Pixma MX850)

I would like to install drivers for MX850 on macOS Ventura. As expected, upon running the installation package I get prompted with an “incompatibility with current OS” error, which is obvious since ...
Marek Bílý's user avatar
1 vote
0 answers
29 views

iMac will not boot into anything [duplicate]

As the title says, I cannot boot my iMac (late 2012) into anything. I’ve tried everything from booting into Safe Mode, Recovery Mode (and Internet Recovery Mode), doing a diagnostics test (which didn’...
SpaceDevil2006's user avatar
1 vote
1 answer
143 views

How to remove old PDF Services in read-only file system?

I am tidying up my print PDF services (long overdue). But I can't find a way to delete the two "Save to..." PDF services: They were created by me with Automator probably under Catalina and ...
Gilby's user avatar
  • 11.4k
2 votes
2 answers
533 views

I want to be able to quit Finder but can't edit Finder's Info.plist after disabling SIP

I'm trying to edit /System/Library/CoreServices/Finder.app/Contents/Info.plist on my MacOS Ventura (13.01) to be able to quit Finder (remove from tab switcher): m@ms-MacBook-Pro ~ % csrutil status ...
Moti Korets's user avatar
2 votes
1 answer
5k views

What are risks of disabling SIP for OpenCore Legacy Patcher: UNAUTHENTICATED_ROOT?

In order to keep MacOS updated on older Mac, OpenCore Legacy Patcher needs to lift next System Integrity Protections: UNAUTHENTICATED_ROOT UNRESTRICTED_FS UNTRUSTED_KEXTS What do they allow and what ...
HoursFrom.World's user avatar
1 vote
1 answer
98 views

Backup Pictures folder using unison

I've been very successfully using unison to back up my personal data to a remote machine. The problem is that I cannot seem to be using it to back up my pictures as I always get the error Error in ...
Martin's user avatar
  • 138
2 votes
1 answer
858 views

Can't disable System Integrity Protection for auxiliary systems on my Apple Silicon mac: "recovery system is not paired with the required volume"

I have an M1 Mac Mini with three macOS systems installed within the same APFS container on the internal drive: Big Sur, Monterey, and the latest Ventura beta. If I boot into the recovery environment, ...
Bri Bri's user avatar
  • 2,518
2 votes
1 answer
115 views

App reported "in use" that isn't

I downloaded a Catalina installer which can't run because I am already on Monterey. I copied it to an external drive and put the internal copy in the Trash. When I try to empty the Trash, Finder ...
WGroleau's user avatar
  • 5,065
2 votes
0 answers
225 views

Re-enabling csrutil prevents mac from booting after a new apf image mounted [BigSurOS]

Question How to re-enable csrutil and csrutil authenticated-root and get the mac to load? Problem After having mounted a new boot Volume with a small modification to the folder /usr/lib I am unable to ...
acabra85's user avatar
  • 121
1 vote
1 answer
121 views

Force Music app to sort with prefixes (“The”, “A”, “An”, etc.)

Back in the ol'days In iTunes package, there was a file called SortPrefixes.plist in localisation folders containing several sort prefixes (“The”, “A”, “An”, etc.). Removing them in this file was ...
Joan's user avatar
  • 259
2 votes
2 answers
3k views

Restoring Apple Mobile File Integrity back to default settings (nvram boot-args)

I modified Apple Mobile File Integrity by running the following commands in a Terminal: sudo nvram boot-args="amfi_get_out_of_my_way=1" How do I revert this change and restore the macOS ...
Mxm's user avatar
  • 31
1 vote
0 answers
282 views

How to get into Recovery mode in MacOS 11.4 **Remotely**(M1)

I need to reboot into recovery mode on a remote Mac machine (M1, 11.4). I found that there are 2 ways to do it: One - By pressing some buttons at startup. Two - By setting the nvram like so: sudo ...
David155's user avatar
1 vote
2 answers
3k views

Error while disabling csrutil on macOS Catalina

I've tried to disable csrutil on Catalina by booting and repeatedly hitting EDIT: cmd+R. I've run the terminal and disabled csrutil. I get the error "failed to modify system integrity ...
kr1p's user avatar
  • 31
2 votes
0 answers
352 views

Cannot spoof MacOS version disabling SIP

I've been trying to spoof my Mac version because I need to install an app for school that doesn't support Mac OS Mojave. The application does not have a burned in Info.plist file so I cannot modify ...
Alidapro's user avatar
-6 votes
1 answer
323 views

Does FileVault technically require SIP? [closed]

To disable SIP I must disable FileVault. Is there a technical reason that FileVault needs SIP? IIRC I had FileVault enabled and SIP disabled on older versions of OSX.
nmr's user avatar
  • 286
3 votes
1 answer
560 views

iotop not working even with SIP disabled

I am trying to run iotop in order to see realtime disk usage stats. I disabled System Integrity Protection for dtrace by booting into Recovery Mode and running csrutil disable csrutil enable --without ...
Cardano's user avatar
  • 131
0 votes
0 answers
63 views

How to determine whether a file is part of base OS installation?

Is it possible to tell whether a file on my Mac (M1 with OS 12.1) was part of the original OS installation, rather than something I installed myself? I thought I could just see whether the files were ...
JW.'s user avatar
  • 554
9 votes
2 answers
5k views

How do I get access to `/Applications` from the command line?

I'm new to Monterey, coming from (I think) the last version of OS X before it became macOS -- definitely before this SIP stuff started to make life interesting. I used to be able to say these things $ ...
Peter's user avatar
  • 193
2 votes
2 answers
5k views

Mac M1 how to copy dylib file to usr/lib in macOS Big Sur/?

I have a requirement to copy a dylib file to /usr/lib folder. Even though I have disabled csruitl in recovery mode to bypass the SIP. Still I cannot copy this file to the /usr/lib folder. I have also ...
yts61's user avatar
  • 121
5 votes
2 answers
3k views

Modify SIP in normally booted system

I have MacBook Pro (2017) with macOS High Sierra (10.13.6). I have SIP and amfi disabled. I want to enable a part / the majority of SIP (e.g. csrutil enable --without fs) without having to reboot into ...
Joy Jin's user avatar
  • 2,833
2 votes
0 answers
42 views

How to check system integrity after uninstalling VirtualBox kernel extensions

I recently installed VirtualBox on my Mac. Then it didn't work as I expected so I decided to uninstall it. But apparently VirtualBox installed kernel extensions. I uninstalled VirtualBox with the ...
user avatar
1 vote
1 answer
991 views

Creating a firmlink in /usr on MacOS 10.15 & 11

I cannot disable SIP to make / (root filesystem) writeable in my environment, so I'm trying to figure out how to create a synthetic firmlink in /usr instead. I have no problem creating firmlinks under ...
Steve's user avatar
  • 113
1 vote
0 answers
90 views

Operation not permitted - probably not a Full Disk Access issue

I've given both iterm and bash (both bashes - one is from homebrew) Full Disk Access, but I still see: $ find /System/Volumes/Data/private/var/networkd/db cmd output started 2021 Mon Jun 14 10:03:24 ...
dstromberg's user avatar
0 votes
1 answer
100 views

How to delete a copy of a system font

At some point I made copies of all the fonts in the System>Library folder. I would now like to delete those duplicates, which are not in use and are not in a System folder. But macOS (Mojave) won't ...
dhnyny's user avatar
  • 179
0 votes
0 answers
1k views

How to change swap location on macOS versions like Mojave with SIP?

I am using Mobile simulator and virtual machines which memory intensive. There are a few posts on internet about how to change the location of Swap files on macOS versions with System Integrity ...
Amal's user avatar
  • 1
3 votes
2 answers
9k views

Cannot access terminal in recovery mode on M1 Mac

I am trying to follow this tutorial to temporaily disable SIP on my new M1 MacBook Air. Once I get into recovery mode, instead of seeing a Utilities menu where I can open the terminal, I see a message ...
Brennan Hoeting's user avatar
3 votes
1 answer
344 views

Does the SIP still protect against other operating systems?

System Integrity Protection from Apple protects very important parts of the system and is, in my opinion, the main reason a Mac is so secure. That's why I ask myself the question whenever I boot Linux ...
BabyBoy's user avatar
  • 961
0 votes
1 answer
5k views

Unable to mount read-write in Big Sur 11.2.2 in Single User Mode

I'm on Big Sur 11.2.2, Single User Mode. When I use /sbin/mount -uw /, it says mount_apfs: volume could not be mounted: Permission denied and failed with 66. I have read this post. But mount -uw /...
xiaoyu2006's user avatar
2 votes
1 answer
2k views

What is ~/Library/VoiceTrigger/SAT ? Part of Siri?

What is this thing that we're not even allowed to look at? sudo ls -late@ ~/Library/VoiceTrigger Password: ls: SAT: Operation not permitted total 0 drwxrwxr-x 88 WGroleau staff 2816 Feb 18 15:34 .. ...
WGroleau's user avatar
  • 5,065
2 votes
2 answers
1k views

How to always allow any app to do anything / disable Security & Privacy authorization dialogues

Currently on macOS Catalina. I work in sound design and audio development. I use several Automator-scripts and other workflow applications to control various stuff, and for every new project or when I ...
Andreas Hedlund's user avatar
5 votes
1 answer
6k views

Disabled mac os SIP but still can't delete default apps

I'm using mac os 11.2.1 Big Sur. My question concerns using the Terminal utility to delete Apple default apps protected by SIP. I have disabled System Integrity Protection and confirmed that it is off ...
Kim's user avatar
  • 53
3 votes
1 answer
14k views

Virtualbox - Can't install guest additions (Big Sur)

I'm trying to install guest additions on my macOS Big Sur VM, but the installation never has been successful. I always get a triggering "The installation failed" screen. Since Command+R can'...
Iammethe24's user avatar
3 votes
1 answer
862 views

Can I delete files and folders in /private/var/tmp folder? [closed]

I ran into the situation where using simultaneously Google Drive File Stream (DFS) and Code42 Crashplan and some other Corporate SW like CrowdStrike's Falcon, Bitdefender, etc... which seems are not ...
DelphyM's user avatar
  • 209
0 votes
1 answer
2k views

Mac Big Sur home folder permissions: Read-only file system when renaming files

UPDATE #2 I was able to successfully rename the files using sed: for f in *.Rdat; do mv $f $(echo $f | sed "s/PCC-//"); done UPDATE I discovered I can rename individual files: mv 'PCC-ASR-L....
someguyinafloppyhat's user avatar
0 votes
0 answers
1k views

Cannot set boot-args even with SIP disabled

I have installed macOS Big Sur as a guest system in Parallels Desktop 16. I disabled SIP. However, I'm still unable to change nvram values for boot-args. Is there another security feature that I haven'...
Joy Jin's user avatar
  • 2,833
4 votes
1 answer
14k views

Local policy error when disabling SIP on Big Sur/M1

I'm trying to disable System Integrity Protection on an M1 Mac. csrutil disable as well as csrutil authenticated-root disable fail with an error: csrutil: Failed to update security configuration for &...
Kornel's user avatar
  • 201
4 votes
4 answers
3k views

How to prevent even root users from uninstalling or tampering the application on macOS

The aim is to prevent even root users from uninstalling our app on their mac. Apparently, many security applications have this sort of functionality wherein a user(even with root privilege) can not ...
Siva Prakash's user avatar
1 vote
2 answers
434 views

Disable gatekeeper notarisation check without disabling SIP

I am running into this issue where MacOS does security checks on new executables over the network. This introduces a significant delay when first running a new executable. It's very annoying when ...
Timmmm's user avatar
  • 524
2 votes
1 answer
148 views

Attempting to Disable Thunderbolt Extensions on Yosemite 10.10.5

I just started having this issue with my Mid-2014 15" Macbook Pro with Retina display, and I've tried refreshing a few processes and did a factory reset, but am still having the problem appear. ...
shiningbind's user avatar
2 votes
1 answer
1k views

disable SIP on a remote/headless machine running Sierra?

I have a remote 2012 mac mini running Sierra. Long ago I was doing some troubleshooting and had created a secondary copy of the system on the machine. Once I had finished whatever I was doing (which ...
JVC's user avatar
  • 2,871
0 votes
1 answer
88 views

Restrict super user write access to some files

Is there a way to add folders to the SIP (System Integrity Protection) configurations in order to prevent them to be modified by the root user? Or any other way not involving System Integrity ...
Hugh's user avatar
  • 363
1 vote
0 answers
56 views

Access Raw Disk on Virtualbox with SIP enabled

I was reading the following question and answers but I'm having trouble and hoping someone can help. I am dual booting Catalina and Windows 10 and would like to boot my Windows disks in Virtual box ...
Drod's user avatar
  • 11