SIP & Gatekeeper deaktivieren

SIP

csrutil status
System Integrity Protection status: enabled.

Um den Systemintegritätsschutz (SIP) zu deaktivieren müssen Sie Ihren Mac in den Wiederherstellungs-Modus booten (CMD + R) und folgendes ins Terminal eingeben.

csrutil disable
Successfully disabled System Integrity Protection. Please restart the machine for the changes to take effect.

SIP Einschränkungen

# Enable SIP and allow installation of unsigned kernel extensions
csrutil enable --without kext

# Enable SIP and disable filesystem protections
csrutil enable --without fs

# Enable SIP and disable debugging restrictions
csrutil enable --without debug

# Enable SIP and disable DTrace restrictions
csrutil enable --without dtrace

# Enable SIP and disable restrictions on writing to NVRAM
csrutil enable --without nvram

System Integrity Protection – Adding another layer to Apple’s security model

Gatekeeper

# Per Application:
sudo xattr -rd com.apple.quarantine /Applications/SelectApp.app

# Globally:
sudo spctl --master-disable