SIP
csrutil status
System Integrity Protection status: enabled.
To disable the System Integrity Protection (SIP) you need to boot your Mac into Recovery Mode (CMD + R) and enter the following into the terminal.
csrutil disable
Successfully disabled System Integrity Protection. Please restart the machine for the changes to take effect.
SIP Restrictions
# Enable SIP and allow installation of unsigned kernel extensions
csrutil enable --without kext
# Enable SIP and disable filesystem protections
csrutil enable --without fs
# Enable SIP and disable debugging restrictions
csrutil enable --without debug
# Enable SIP and disable DTrace restrictions
csrutil enable --without dtrace
# Enable SIP and disable restrictions on writing to NVRAM
csrutil enable --without nvram
System Integrity Protection – Adding another layer to Apple’s security model
Gatekeeper
# Per Application:
sudo xattr -rd com.apple.quarantine /Applications/SelectApp.app
# Globally:
sudo spctl --master-disable