Disable SIP & Gatekeeper


csrutil status
System Integrity Protection status: enabled.

To disable the System Integrity Protection (SIP) you need to boot your Mac into Recovery Mode (CMD + R) and enter the following into the terminal.

csrutil disable
Successfully disabled System Integrity Protection. Please restart the machine for the changes to take effect.

SIP Restrictions

# Enable SIP and allow installation of unsigned kernel extensions
csrutil enable --without kext

# Enable SIP and disable filesystem protections
csrutil enable --without fs

# Enable SIP and disable debugging restrictions
csrutil enable --without debug

# Enable SIP and disable DTrace restrictions
csrutil enable --without dtrace

# Enable SIP and disable restrictions on writing to NVRAM
csrutil enable --without nvram

System Integrity Protection – Adding another layer to Apple’s security model


# Per Application:
sudo xattr -rd com.apple.quarantine /Applications/SelectApp.app

# Globally:
sudo spctl --master-disable