Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 14327

The System Integrity Protection (vulgo “rootless”) feature of OS X El Capitan protects critical filesystem areas from root user modification attempts.

129 votes

How do I disable System Integrity Protection (SIP) AKA "rootless" on macOS?

It's possible to disable SIP by booting to Recovery HD and running the following command: csrutil disable It is also possible to enable SIP protections and selectively disable aspects of it, by adding … All require being booted from Recovery in order to set them: Enable SIP and allow installation of unsigned kernel extensions csrutil enable --without kext Enable SIP and disable filesystem protections …
Rich Trouton's user avatar
  • 4,207
3 votes

Error configuring mcrypt after upgrading to El Capitan

El Capitan adds a new security feature named System Integrity Protection (SIP). … For more information on SIP, please see this post: https://derflounder.wordpress.com/2015/10/01/system-integrity-protection-adding-another-layer-to-apples-security-model/ …
Rich Trouton's user avatar
  • 4,207
51 votes

What is the "rootless" feature in El Capitan, really?

This allows Apple to make changes to SIP-protected parts of the OS without needing to change the existing SIP protections. … In addition to the list of SIP exceptions which Apple has set in rootless.conf, there is a second list of SIP exceptions. …
Rich Trouton's user avatar
  • 4,207
1 vote

How does a program modify /usr but I am unable to even with admin privileges?

It is possible to add, remove or change SIP-protected files and directories via an installer package which is signed by Apple’s own certificate authority. … This allows Apple to make changes to SIP-protected parts of the OS without needing to change the existing SIP protections. …
Rich Trouton's user avatar
  • 4,207