Questions tagged [sip]
The System Integrity Protection (vulgo “rootless”) feature of OS X El Capitan protects critical filesystem areas from root user modification attempts.
0
votes
1answer
28 views
Can I rename the “Pictures” folder without “Full Disk Access”?
Our application needs write access to the user's Home directory, specifically to Pictures, Movies, Music, etc., so it can redirect them to our cloud support. But, on Mojave, renaming Pictures (to some ...
3
votes
1answer
61 views
SIP preventing deletion of /opt/local
Ran into the same problem tonight as this question from SO that wasn't fully answered.
I'm trying to uninstall an old installation of MacPorts, and run into SIP:
mybox:~ me$ sudo rm -rf /opt/local
...
1
vote
0answers
25 views
Dtrace working but no kernel data can be output?
I have for a long time run as sip -without dtrace to use dtrace and this is fine but a few apps I want to read data from seen to run in kernel mode (Little Snitch has several components for instance). ...
0
votes
0answers
80 views
Are these terminal commands and temporarily disable SIP safe?
Im trying to installed Sophos anti virus on a mac running 10.10.5, but it keeps failing to install, Sophos support have advised i should do the following work flow, which involves running the ...
1
vote
1answer
70 views
Updates impact on /usr with SIP Disabled
I have a very complex application that needs a directory in /usr. By complex, I mean it would take thousands of changes to rid the code of /usr references. It has to be done, but I need a newer OS X ...
3
votes
3answers
221 views
How to run a LaunchAgent that runs a script which causes failures because of System Integrity Protection
After upgrading to Mojave, my rsync based backup script run via a launch agent in ~/Library/LaunchAgents, could no longer read some directories in ~/Library.
0
votes
1answer
34 views
Problem with kernel_task
It's about 3 days that I can't do anything with my macbook air because the kernel_task is eating up the CPU. So I found this but the command csrutil disable/enable doesn't work on the terminal (El ...
3
votes
0answers
528 views
Load untrusted kernel extension in macOS Mojave
The Volta application is installed on my MacBook Pro, running macOS 10.14 Mojave.
This app needs a kernel extension to function properly, and said extension does not have the proper code signatures. ...
0
votes
0answers
46 views
Disable all logging [duplicate]
How can I do to completely disable system and applications logs in macOS High Sierra? (Ass seen using Console.app)
I don't see any value in having all the subsystems logging endless useless stuff all ...
1
vote
2answers
228 views
GPU-defect Macbook Pro 2011 does not accept csrutil disable anymore (10.13.6)
I have a failing Macbook Pro and have deactivated the discrete GPU by doing something [editors note: help us help you by detailing what modifications you made to deactivate the GPU].
Now on this ...
1
vote
0answers
11 views
Generate coredump file with SIP enabled
I've followed the steps to make coredump enable in my machine (mainly by setting ulimit -c unlimited and allow write permissions for all a+x in /cores folder).
However, it seems like It doesn't work ...
2
votes
2answers
160 views
How to start Internet Recovery Mode of El Capitan with multiple OS installed?
Thank you for your time. Here is my problem:
A) Goal
Start into Mac OS X El Capitan internet recovery mode and temporarily disable System Integrity Protection (SIP) to use (X11 functions of) ...
0
votes
1answer
38 views
How can I override default Python modules with ones I install with pip?
I've run into this issue with PIL and Pillow. I didn't realize PIL was already installed, so I ran:
sudo pip install PIL
As best I knew, it installed PIL. Then I wrote a program that used a ...
1
vote
1answer
42 views
How can I mark an arbitrary file as Restricted (using SIP)?
I am looking for further information on protecting certain files so they cannot be edited unless the system is rebooted in Recovery mode. Is SIP the direction to go in? What are the steps to make an ...
2
votes
1answer
85 views
Perl library locations, and System Integrity Protection
My system perl seems to have a bunch of cruft left over from previous installations:
% which perl
/usr/bin/perl
% perl -V | perl -ne 'print if /INC/...//'
@INC:
/Library/Perl/5.18/darwin-...
3
votes
1answer
518 views
Creating a folder in the root of the filesystem results in “Operation not permitted”
The following command:
$ sudo mkdir /AppleInternal
and entering my password when prompted,
results in:
mkdir: /AppleInternal: Operation not permitted
Is this because of System Integrity Protection? ...
0
votes
0answers
127 views
Errno::EPERM at / Operation not permitted - /private/var/db/ConfigurationProfiles/Store
I am developing a Ruby On Rails application that uses react. All of the dependancies are installed through yarn.
My system details:
high sierra 10.13.4 (17E199)
Homebrew 1.6.2
Node v8.11.1
Yarn 1.6....
3
votes
1answer
920 views
Black screen with cursor after logging out of guest account on High Sierra
When I log out of my guest account, it gets stuck with a black screen and a cursor that I can move around but can't do anything except do a forced restart. In my searching, I have seen an old ...
0
votes
0answers
226 views
How to boot into Recovery Mode?
I'm trying to disable SIP, and I can't get Recovery Mode to work at all. Everything I've read says to just hold down command-R during boot.
I've tried command-R before the chime, after the chime, or ...
1
vote
0answers
48 views
SIP is purging DYLD libraries added by SQLAnywhere17. Need these libraries to develop in flask
I develop in Python 3.6 and Flask. I'm currently working with a SQLAnywhere database and have installed the Python package sqlanydb. I have also installed the SQLAnywhere17 driver for Mac OSX.
Up ...
2
votes
1answer
209 views
Downgrade itunes in high sierra
So I need to downgrade itunes to 12.0.1 for a jailbreak (6.1.6 on ipod 4g). Currently, you can't just delete itunes. What would I have to do?
My idea is:
Disable SIP (boot into recovery mode and ...
1
vote
1answer
95 views
When will SIP shutdown the computer to prevent overheating?
I have a MacBook Pro Early 2015 running macOS High Sierra. I've managed to get it to pretty high temperatures for both the CPU and the GPU. I've managed to get them to at least 100ºC and the computer ...
3
votes
1answer
1k views
Restoring the Keychain Access menu bar item
Like others I have been mourning the loss of the Keychain Access menubar item. In the thread I linked to, the OP him-or-herself proposes a self-described “crude workaround” that involves copying the ...
3
votes
1answer
1k views
What does the command `csrutil clear` do?
When I read the arguments of csrutil it says csrutil clear will erase the existing configuration SIP:
csrutil
usage: csrutil <command>
Modify the System Integrity Protection configuration. All ...
1
vote
1answer
74 views
How does macOS “detect malware downloaded with Safari”?
On Apple's website, the company makes this claim about macOS High Sierra's security features:
Can anyone give me more details on the technology that enables macOS to determine if a file downloaded ...
1
vote
0answers
51 views
Monitor accumulated number of bytes written by a process in Terminal?
I need a way to monitor the accumulated total number of bytes written to the disk by a process via the terminal. I've looked around quite a bit, and found several answers either saying to use pv, or ...
3
votes
1answer
97 views
Other than user error, what types of attacks would SIP prevent?
On this site and throughout other Apple enthusiast communities, I often see people strongly advise against disabling System Integrity Protection. This has always struck me as somewhat odd, as SIP did ...
1
vote
4answers
3k views
Problem with “csrutil enable --without debug” on Sierra
I am using a Mac on macOS Sierra 10.12.5.
I want to run the app XtraFinder which opens some additional features in Finder. I used to have it on different computer, but when I download it on this one ...
1
vote
0answers
697 views
kernel_task CPU usage with SIP on a MacBookPro8,2 with no battery
Is there any evidence or technical documentation to support the notion that System Integrity Protection can cause excessive use of the CPU by kernel_task in some situation?
Background
No battery. ...
1
vote
1answer
483 views
System Integrity Protection breaks DYLD_LIBRARY_PATH for python scripts
I have some custom modules that are generated using SWIG that are installed in a a local path eg:
catkin_ws/devel/lib/python2.7/site-packages
When I try to run a python script that uses one of these ...
3
votes
2answers
3k views
How can I remove a pre-installed application on macOS Sierra
I need to remove one of the pre-installed applications (Safari in my case) from a macOS Sierra system. Yet simply deleting the app, installing 3rd party "cleaning" software or any attempts to delete ...
0
votes
0answers
293 views
Does disabling “System Integrity Protection” in El Cap cause shutdown/restart/logout issues?
I have an older M-Audio Firewire audio interface that I use with my Mid 2011 Mac Mini. It's running OS X El Capitan 10.11.6. M-Audio never made drivers for this version of OS X, so I have to disable "...
2
votes
2answers
414 views
Seeking a “softphone” app for iOS
I'm moving towards IP-telephony and need a SIP-client for my mobile phone.
My first choice would've been Linphone, because that's what I use on my desktop, but it disconnects from the provider every ...
1
vote
1answer
188 views
SIP won't stay disabled - I think
I wiped my SSD clean, reinstalled OS X El Capitan, removed corestoreage, and went on to remove SIP using csrutil disable in the command+R recovery environment. (I also tried it from the installation ...
2
votes
0answers
253 views
Kernel Extension Not Loaded
I built a self-made kernel extension (named KAuthTest.kext) and would like to test it out. So in a VM running macOS 10.12.3, I did the followings:
disable SIP by running csrutil disable in recovery ...
3
votes
2answers
366 views
macOS System Integrity Protection Configuration
I was looking to lock down the configuration on some macs, and wanted to know if there is any way to change the files and folders that SIP protects. I know it can be disabled, and its current rules ...
7
votes
0answers
241 views
Why does my `rootless.conf` not always affect SIP’s choice of which files get the `restricted` flag treatment?
What sources say
Like everyone else’s, my /System/Library/Sandbox/rootless.conf file contains the following entries:
$ cat /System/Library/Sandbox/rootless.conf
[…]
/System
[…]
* /...
2
votes
1answer
2k views
How to safely install rEFind from recovery mode?
I want to dual boot OSX and Linux on my Macbook Air, and to do this, I read that I need to install rEFind. If I try doing that I get a message in the terminal:
**** ALERT: SIP ENABLED! ****
rEFInd ...
9
votes
4answers
24k views
Disable SIP without recovery mode
Before you respond that this isn't possible, hear me out. I have a Mac Pro 4,1 (with 5,1 firmware), running MacOS Sierra. I want to disable System Integrity Protection (otherwise known as SIP), but ...
6
votes
2answers
6k views
System Integrity Protection prevents Trash from being emptied
I have no idea how two files ended up in Trash, but I suspect AppDelete to be the culprit. Anyway, the first file is DeviceLink.framework and the other is MobileDevice.framework.
Any idea how to ...
8
votes
2answers
15k views
Some items in the Trash cannot be deleted because of System Integrity Protection
That's the message I'm getting when trying to empty the trash. To my knowledge, almost all of this is just old backups from an external drive, even though the message seems to imply I've been rooting ...
0
votes
0answers
44 views
Can't compress with system integrity protection enabled
I am dealing with a user running with El Capitan who was encountering a peculiar error message when compressing files from Finder:
The contents list can’t be created for compressing
A peculiar error ...
0
votes
1answer
411 views
/Library/Keychains/System.keychain in restricted mode
On OSX 10.12
A friend's keychain somehow got the "restricted" mode added to it. I know about csrutil disable from safe mode etc, I'd really like to know how it could've happened. He has no idea what ...
0
votes
1answer
192 views
Can you permanently disable rootless on OS X?
When booting to recover and running csrutil disable it just writes it into the NVRAM, unfortunately I reset the NVRAM very often so it's annoying to have to do that all the time. It's also annoying ...
1
vote
1answer
569 views
How to reenable System Integrity Protection
How do I reenable System Integrity Protection, after using csrutil disable from the Recovery OS?
1
vote
1answer
436 views
How to upgrade SVN on OSX 10.11 El Capitan With SIP enabled
I am trying to upgrade my SVN version on OSX 10.11 El Capitan. I installed the latest SVN version by brew install svn. When I am typing svn --version I am still getting the old version. From a lot of ...
0
votes
1answer
37 views
Changing my Home icons
Apple makes it rather hard to change things like the system font and icons for the home folder. And while I understand the problems that can occur when the system font is changed; is changing your ...
0
votes
2answers
430 views
SIP prevents Lync 2011 from starting
I'm running OS X 10.11.5, and try to start Microsoft Lync 2011.
When trying to start the Lync application, it directly just exits. I see following log messages:
2016-07-18 15:32:49,309 sandboxd[149]:...
2
votes
2answers
7k views
How do I enable a USB SuperDrive in Mac OS X El Capitan on a MacBook Pro?
I have an older MacBook Pro (Late 2011) which came with a built-in optical drive. I replaced the built-in SuperDrive with a second hard drive. However, the USB SuperDrive is not compatible with Macs ...
0
votes
1answer
86 views
Change Application folder presentation w/out disabling SIP
I keep my apps organized in the /Application folder by arranging their icon manually.
But in El Capitan, SIP prevents the modification of this folder privileges so I cannot set it to read and write ...
