SIP Disable Required to delete com.apple.mail???

Question

Level 1

5 points

SIP Disable Required to delete com.apple.mail???

I'm trying to remove an account from my M1Max Studio running Ventura 13.6.7. The account belongs to my wife, who has never used this Mac, she has her own Mac. The account was on my iMac and very little used, and got migrated over when I upgraded to the Studio.

I first used System Preferences/Useres and Groups to attempt to delete and backup the account, it had an error backing up the account and refused to delete it. I finally settled on just delete the account. It removed her appleid information and the account name, but had errors deleting the account.

Finally I used terminal to execute sudo rm -RF in the account, which deleted almost everything.

What is left is /Users/kw/Library/Containers/com.apple.mail/Data I have changed the owner and group of all the folders from kw on down to my own id and staff

However the Data folder seems to contain some object which may be a datavault that I can not view with finder nor with terminal's ls or stat nor delete with sudo rm -RF

I have seen comments eslewhere that if I need to disable SIP to get at this object, is there any other way?

If I disable SIP, manage to delete /Users/kw , will I be able to enable SIP again?

Mac Studio

Posted on Jun 4, 2024 2:12 PM

Reply

Answer 1

Top-ranking reply

Old Toad

Level 10

216,560 points

Jun 4, 2024 4:06 PM in response to Ericvnepean

If I disable SIP, manage to delete /Users/kw , will I be able to enable SIP again?

Yes. System Integrity Protection can be configured using the csrutil(1) command.

$

usage: csrutil <command>

Modify the System Integrity Protection configuration. All configuration changes apply to the entire machine.

disable

Disable the protection on the machine. Requires a reboot.

enable

Enable the protection on the machine. Requires a reboot.

status

Display the current configuration.

You can check whether System Integrity Protection is currently enabled on your system by running the following command in the Terminal: csrutil status

To enable or disable System Integrity Protection, you must boot to Recovery OS and run the csrutil(1) command from the Terminal.

1. Boot to Recovery OS by restarting your machine and holding down the Command and R keys at startup.

$ csrutil status

System Integrity Protection status: enabled.

Configuring System Integrity Protection

2. Launch Terminal from the Utilities menu.

3. Enter the following command:

$ csrutil enable

After enabling or disabling System Integrity Protection on a machine, a reboot is required.

Note: For certain enterprise configurations that donot allow booting to Recovery OS, System Integrity Protection can be configured by other means.

The short version:

To disable: $ csrutil disable

To enable: $ csrutil enable

Both followed by a reboot.

Reply

Answer 2

Ericvnepean Author

Level 1

5 points

Jun 4, 2024 10:02 PM in response to Old Toad

Thanks old Toad - csrutil worked, I was able to disable and then enable SIP, and get rid of my unwanted files.

Although, on the Mac Studio Command-R on startup does not put you in Recovery mode, instead one needs to hold down the start button for a few seconds until startup options appear.

The other spot of confusion for me was that after disabling SIP, there was a question if all Kexts should be enabled or only Apple Kexts. I chose enabled, but without sound reasoning.

Reply

SIP Disable Required to delete com.apple.mail???

Similar questions