SIP
csrutil status
System Integrity Protection status: enabled.
Um den Systemintegritätsschutz (SIP) zu deaktivieren müssen Sie Ihren Mac in den Wiederherstellungs-Modus
booten (CMD + R
) und folgendes ins Terminal eingeben.
csrutil disable
Successfully disabled System Integrity Protection. Please restart the machine for the changes to take effect.
SIP Einschränkungen
# Enable SIP and allow installation of unsigned kernel extensions
csrutil enable --without kext
# Enable SIP and disable filesystem protections
csrutil enable --without fs
# Enable SIP and disable debugging restrictions
csrutil enable --without debug
# Enable SIP and disable DTrace restrictions
csrutil enable --without dtrace
# Enable SIP and disable restrictions on writing to NVRAM
csrutil enable --without nvram
System Integrity Protection – Adding another layer to Apple’s security model
Gatekeeper
# Per Application:
sudo xattr -rd com.apple.quarantine /Applications/SelectApp.app
# Globally:
sudo spctl --master-disable