OJBs Web Site: Tip

Note: You are currently viewing my old web site. There is a new version with most of this content at OJB.NZ.
The new site is being updated, uses modern techniques, has higher quality media, and has a mobile-friendly version.
This old site will stay on-line for a while, but maybe not indefinitely. Please update your bookmarks. Thanks.

(Up to OJB's Mac Tips List Page)

System Integrity Protection

How to Disable System Integrity Protection...

Warning: Don't do this unless you have a very good reason to do so and know exactly what you're doing! Most users won't need to disable this security setting. It's not intended to prevent you from messing with the system - it's intended to prevent malware and other badly behaved programs from messing with the system. But some low-level utilities may only function if they have unrestricted access.

The System Integrity Protection setting isn't stored in Mac OS X itself. Instead, it's stored in NVRAM on each individual Mac. It can only be modified from the recovery environment.

To boot into recovery mode, restart your Mac and hold Command+R as it boots. You'll enter the recovery environment. Click the "Utilities" menu and select "Terminal" to open a terminal window.

Type the following command into the terminal and press Enter to check the status:
csrutil status

You'll see whether System Integrity Protection is enabled or not.

To disable System Integrity Protection, run the following command:
csrutil disable

Enable SIP Again

If you decide you want to enable SIP later, return to the recovery environment and run the following command:
csrutil enable

Restart your Mac and your new System Integrity Protection setting will take effect. The root user will now have its full, unrestricted access to the entire operating system and every file.