Announcement: Upgrade to macOS Mojave

With features like Dark Mode, Stacks, and four new built-in apps, macOS Mojave helps you get more out of every click. 
Find out how to upgrade to macOS Mojave > https://support.apple.com/macos/mojave

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Question:

Question: SIP partially disabled by something. How?

I was cleaning up/organizing my laptop and ran several system checks. I have never disabled system integrity protection on my system, but to my surprise, I found the following:


$ csrutil status

System Integrity Protection status: enabled (Custom Configuration).


Configuration:

Apple Internal: disabled

Kext Signing: disabled

Filesystem Protections: enabled

Debugging Restrictions: enabled

DTrace Restrictions: enabled

NVRAM Protections: enabled

BaseSystem Verification: enabled



This is an unsupported configuration, likely to break in the future and leave your machine in an unknown state.


Any guesses as to what might have disabled the first two? (I didn't.) How concerned should I be about this? I haven't found anything similar to this situation via Google, so I really have no clue what happened here.


Thanks!



EtreCheck version: 4.0.4 (4A150)

Report generated: 2018-03-13 11:02:08

Download EtreCheck from https://etrecheck.com

Runtime: 4:27

Performance: Good


Problem: No problem - just checking


Major Issues:

Anything that appears on this list needs immediate attention.


System Integrity Protection disabled - System Integrity Protection is disabled. This computer is at risk of malware infection.


Minor Issues:

These issues do not need immediate attention but they may indicate future problems.


Heavy RAM usage - This machine is using a large amount of RAM.

Unsigned files - There is unsigned software installed. It appears to be legitimate but should be reviewed.

System modifications - There are a large number of system modifications running in the background.


Hardware Information:

MacBook Pro (Retina, 13-inch, Late 2013)

MacBook Pro Model: MacBookPro11,1

1 2.8 GHz Intel Core i7 (i7-4558U) CPU: 2-core

16 RAM Not upgradeable

BANK 0/DIMM0

8 GB DDR3 1600 ok

BANK 1/DIMM0

8 GB DDR3 1600 ok

Battery: Health = Normal - Cycle count = 187


Video Information:

Intel Iris - VRAM: 1536 MB

Color LCD 3360 x 2100


Drives:

disk0 - APPLE SSD SM1024F 1.00 TB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x4 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 999.70 GB

disk1s1 - Macintosh HD (APFS) 999.70 GB 780.07 GB

disk1s2 - Preboot (APFS) [APFS Preboot] 999.70 GB 21 MB

disk1s3 - Recovery (APFS) [Recovery] 999.70 GB 510 MB

disk1s4 - VM (APFS) [APFS VM] 999.70 GB 2.15 GB


Mounted Volumes:

disk1s1 - Macintosh HD 999.70 GB (216.75 GB free)

APFS

Mount point: /

Encrypted


disk1s4 - VM [APFS VM] 999.70 GB (216.75 GB free)

APFS

Mount point: /private/var/vm


Network:

Interface usbmodem1421: Arduino Micro 2

Interface usbmodem1411: Arduino Micro

Interface en8: AX88179 USB 3.0 to Gigabit Ethernet

Interface en4: Thunderbolt Ethernet

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

One IPv4 address

Interface usbmodem1: PX4 BL FMU v2.x

Interface en7: MiFi 5510

Interface en9: StarTech USB32DPPRO

Interface en10: iPhone

Interface en3: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

Interface en6: Apple USB Ethernet Adapter

Interface en5: AX88178

Interface en11: iPad

iCloud Quota: 615 MB available


System Software:

macOS High Sierra 10.13.3 (17D102)

Time since boot: About 13 days

System Load: 1.89 (1 min ago) 1.98 (5 min ago) 2.04 (15 min ago)


Security:

System Status
Gatekeeper Mac App Store and identified developers
System Integrity Protection enabled (Custom Configuration)


Unsigned Files:

Launchd: /Library/LaunchAgents/org.gpgtools.macgpg2.fix.plist

Executable: /usr/local/MacGPG2/libexec/fixGpgHome

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/comp.text.tex.distribution.Helper.plist

Executable: /Library/PreferencePanes/TeXDistPrefPane.prefPane/Contents/Library/LaunchServic es/comp.text.tex.distribution.Helper --launch-service --version 271 --pid 1368

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/org.pqrs.Karabiner.load.plist

Executable: /Library/Application Support/org.pqrs/Karabiner/startup.sh start

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/net.culater.SIMBL.Agent.plist

Executable: /Library/ScriptingAdditions/SIMBL.osax/Contents/Resources/SIMBL Agent.app/Contents/MacOS/SIMBL Agent

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/org.gpgtools.gpgmail.enable-bundles.plist

Executable: /Library/Application Support/GPGTools/uuid-patcher enable-bundles

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/org.virtualbox.startup.plist

Executable: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.cisco.anyconnect.gui.plist

Executable: /Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app --wait-apps /Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.cisco.anyconnect.vpnagentd.plist

Executable: /opt/cisco/anyconnect/bin/vpnagentd -execv_instance

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.sony.WirelessAutoImportLauncher.agent.plist

Executable: /Library/Application Support/WirelessAutoImport/WirelessImporterDaemon

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/org.gpgtools.macgpg2.shutdown-gpg-agent.plist

Executable: /usr/local/MacGPG2/libexec/shutdown-gpg-agent

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/org.gpgtools.gpgmail.patch-uuid-user.plist

Executable: /Library/Application Support/GPGTools/uuid-patcher

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/net.infinite-labs.SIMBLEnablerForSandboxedApps.plist

Executable: ~/Library/Application Support/Afloat/SIMBL Enabler for Sandboxed Apps.app/Contents/MacOS/SIMBL Enabler for Sandboxed Apps

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/org.gpgtools.gpgmail.patch-uuid.plist

Executable: /Library/Application Support/GPGTools/uuid-patcher

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/org.virtualbox.vboxwebsrv.plist

Executable: /Applications/VirtualBox.app/Contents/MacOS/vboxwebsrv

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Details: Exact match found in the whitelist - probably OK


Kernel Extensions:

/Applications/ExpressVPN.app

[Not Loaded] ExpressVPNSplitTunnel.kext (1.0.2 - SDK 10.12)

/Applications/MATLAB_R2017b.app

[Not Loaded] sldrtkrn.kext (5.5.0 - OS X 10.8)

/Applications/Parallels Desktop.app

[Not Loaded] prl_hypervisor.kext (12.2.1 41615 - SDK 10.9)

[Not Loaded] prl_netbridge.kext (12.2.1 41615 - SDK 10.9)

[Not Loaded] prl_usb_connect.kext (12.2.1 41615 - SDK 10.9)

[Not Loaded] prl_vnic.kext (12.2.1 41615 - SDK 10.9)

/Applications/Wireless Auto Import.app

[Not Loaded] SONYDeviceType01.kext (1.2.00.01242 - SDK 10.6)

/Library/Application Support/VirtualBox

[Loaded] VBoxDrv.kext (5.2.6)

[Loaded] VBoxNetAdp.kext (5.2.6)

[Loaded] VBoxNetFlt.kext (5.2.6)

[Loaded] VBoxUSB.kext (5.2.6)

/Library/Application Support/org.pqrs/Karabiner

[Loaded] Karabiner.signed.kext (10.22.0 - SDK 10.12)

/Library/Extensions

[Not Loaded] LogitechHIDDevices.kext (3.9.5 - SDK 10.8)

[Not Loaded] LogitechUnifying.kext (1.3.5 - SDK 10.8)

[Not Loaded] AX88179_178A.kext (1.6.0 - SDK 10.9)

[Loaded] DisplayLinkDriver.kext (3.1.0 (82262) - SDK 10.9)

/System/Library/Extensions

[Not Loaded] FTDIUSBSerialDriver.kext (2.2.18 - SDK 10.6)

[Not Loaded] RT2870USBWirelessDriver.kext (4.2.9.2 - SDK 10.6)

[Loaded] MicrosoftMouse.kext (8.2)

[Not Loaded] OlympusDSSDriver.kext (2.0.0)

/System/Library/Extensions/MicrosoftMouse.kext/Contents/PlugIns

[Not Loaded] MicrosoftMouseBluetooth.kext (8.2)

[Loaded] MicrosoftMouseUSB.kext (8.2)


System Launch Agents:

[Not Loaded] 9 Apple tasks
[Loaded] 155 Apple tasks
[Running] 126 Apple tasks


System Launch Daemons:

[Not Loaded] 35 Apple tasks
[Loaded] 166 Apple tasks
[Running] 131 Apple tasks


Launch Agents:

[Loaded] org.gpgtools.gpgmail.patch-uuid-user.plist (? 84ce07f2 - installed 2015-09-21)
[Loaded] org.gpgtools.Libmacgpg.xpc.plist (Lukas Pitschl - installed 2016-06-28)
[Running] org.gpgtools.macgpg2.shutdown-gpg-agent.plist (? df7bd0cf - installed 2016-06-28)
[Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2018-01-25)
[Not Loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2017-12-12)
[Loaded] org.macosforge.xquartz.startx.plist (Apple Inc. - XQuartz - installed 2016-10-26)
[Loaded] org.gpgtools.gpgmail.enable-bundles.plist (? d032aea - installed 2015-09-21)
[Running] com.Logitech.Control Center.Daemon.plist (Logitech Inc. - installed 2016-10-04)
[Running] com.displaylink.useragent.plist (DisplayLink Corp - installed 2017-06-30)
[Running] com.sony.WirelessAutoImportLauncher.agent.plist (? c33fba7e - installed 2014-01-28)
[Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2018-02-03)
[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-01-24)
[Not Loaded] com.displaylink.useragent-prelogin.plist (DisplayLink Corp - installed 2017-06-30)
[Loaded] com.oracle.java.Java-Updater.plist (? a8e16b78 - installed 2017-12-19)
[Loaded] com.cisco.anyconnect.gui.plist (? 40bd3462 - installed 2015-08-27)
[Loaded] org.gpgtools.macgpg2.fix.plist (? d7ac5146 - installed 2016-06-28)
[Loaded] org.gpgtools.updater.plist (Lukas Pitschl - installed 2016-07-05)
[Not Loaded] net.culater.SIMBL.Agent.plist (? 850e6250 - installed 2014-09-13)


Launch Daemons:

[Loaded] org.gpgtools.gpgmail.patch-uuid.plist (? 42fc83f8 - installed 2015-09-21)
[Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2018-01-25)
[Not Loaded] org.virtualbox.startup.plist (? 700b9385 - installed 2018-02-06)
[Running] com.cisco.anyconnect.vpnagentd.plist (? a7cbca7 - installed 2015-07-22)
[Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-02-01)
[Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2010-08-25)
[Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2017-12-19)
[Loaded] org.macosforge.xquartz.privileged_startx.plist (Apple Inc. - XQuartz - installed 2016-10-26)
[Running] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2018-01-24)
[Loaded] com.surteesstudios.Bartender.BartenderInstallHelper.plist (Surtees Studios Limited - installed 2015-10-09)
[Running] com.displaylink.displaylinkmanager.plist (DisplayLink Corp - installed 2017-06-30)
[Loaded] com.cocoatech.pathfinder.SMFHelper7.plist (Dragan Milic - installed 2016-10-07)
[Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2018-03-05)
[Loaded] com.DesignScience.DSMTTool.plist (Design Science, Inc. - installed 2015-12-05)
[Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2015-08-07)
[Not Loaded] org.pqrs.Karabiner.load.plist (? 44439558 - installed 2016-10-31)
[Loaded] comp.text.tex.distribution.Helper.plist (? 4f9d4c3e - installed 2018-02-23)


User Launch Agents:

[Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2018-02-02)
[Loaded] com.adobe.ARM.de23d1e3aa2d00ce38d73f10fcbdc8dcaaaf6be989610710a1ddda77.plist (Adobe Systems, Inc. - installed 2017-11-01)
[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-01-24)
[Running] com.c-command.SpamSieve.LaunchAgent.plist (C-Command Software, LLC - installed 2017-08-24)
[Not Loaded] org.virtualbox.vboxwebsrv.plist (? 0 - installed 2018-01-15)
[Loaded] com.skype.skype.shareagent.plist (Skype Communications S.a.r.l - installed 2017-06-28)
[Not Loaded] net.infinite-labs.SIMBLEnablerForSandboxedApps.plist (? 0 - installed 2011-07-29)
[Loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2017-11-17)


User Login Items:

HyperDock Helper Application (Mac App Store - installed 2017-01-18)

(/Applications/HyperDock.app/Contents/Library/LoginItems/HyperDock Helper.app)

Keyboard Maestro Engine Application (Stairways Software Pty Ltd - installed 2018-02-19)

(/Applications/Keyboard Maestro.app/Contents/MacOS/Keyboard Maestro Engine.app)

Flux Application (Michael Herf

(/Applications/Flux.app)

Karabiner Application (Fumihiko Takayama

(/Applications/Karabiner.app)

Dropbox Application (Dropbox, Inc.

(/Applications/Dropbox.app)

Fantastical Application (Mac App Store

(/Applications/Fantastical.app)

Spectacle Application (Eric Czarny

(/Applications/Spectacle.app)

Parallels Toolbox Application (Parallels International GmbH

(/Applications/Parallels Toolbox.app)

PopClip Application (Mac App Store

(/Applications/PopClip.app)

Box Sync Application (Box, Inc.

(/Applications/Box Sync.app)

iTunesHelper Application (Apple, Inc. - installed 2018-01-24)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Shortcat Application

(/Applications/Shortcat.app)

SleepTime Application (Mac App Store

(/Applications/SleepTime.app)

Moom Application (Mac App Store

(/Applications/Moom.app)

witchdaemon Application (Mac App Store

(/Applications/Witch.app/Contents/PlugIns/Witch.prefPane/Contents/Helpers/witch daemon.app)

HazelHelper Application (Noodlesoft, LLC

(/Library/PreferencePanes/Hazel.prefPane/Contents/MacOS/HazelHelper.app)

Alfred 3 Application (Running with Crayons Ltd

(/Applications/Alfred 3.app)

GrowlLauncher SMLoginItem (Mac App Store - installed 2015-01-06)

(/Applications/Growl.app/Contents/Library/LoginItems/GrowlLauncher.app)

BartenderStartAtLoginHelper SMLoginItem (Surtees Studios Limited - installed 2018-03-01)

(/Applications/Bartender 3.app/Contents/Library/LoginItems/BartenderStartAtLoginHelper.app)

1Password mini SMLoginItem (Mac App Store - installed 2018-02-23)

(/Applications/1Password.app/Contents/Library/LoginItems/2BUA8C4S2C.com.agilebi ts.onepassword-osx-helper.app)

DegreesLaunchHelper SMLoginItem (Mac App Store - installed 2015-02-05)

(/Applications/Degrees.app/Contents/Library/LoginItems/DegreesLaunchHelper.app)


Internet Plug-ins:

npDDRia: 0.0.14.1 (installed 2014-02-21)

QuickTime Plugin: 7.7.3 (installed 2018-01-29)

AdobePDFViewerNPAPI: 11.0.23 (installed 2017-11-17)

AdobePDFViewer: 11.0.23 (installed 2017-11-17)

PMCADownloader: 1.2.1998.896 (installed 2014-08-29)

Flash Player: 28.0.0.161 (installed 2018-02-06)

SharePointBrowserPlugin: 14.7.7 (installed 2017-09-24)

FlashPlayer-10.6: 28.0.0.161 (installed 2018-02-06)

Mathematica: 10.0.0 (installed 2015-12-14)

JavaAppletPlugin: Java 8 Update 161 build 12 (installed 2018-02-27)


Audio Plug-ins:

BartenderAudioPlugIn: 1.0.0 (installed 2015-11-15)


Safari Extensions:

1Password.safariextz - AgileBits - https://agilebits.com/onepassword (installed 2017-12-13)
OpenIE.safariextz - Parallels - http://www.parallels.com (installed 2014-08-28)


3rd Party Preference Panes:

Default Folder X (installed 2015-09-22)

Device Detector (installed 2011-04-24)

Flash Player (installed 2018-02-01)

GPGPreferences (installed 2016-08-08)

Hazel (installed 2015-12-22)

HyperDock (installed 2017-04-07)

Java (installed 2018-02-27)

Logitech Control Center (installed 2017-01-31)

Microsoft Mouse (installed 2015-11-25)

SwitchResX (installed 2017-03-28)

TeXDistPrefPane (installed 2015-07-13)


Time Machine:

Skip System Files: No

Mobile backups:

Auto backup: Yes

Volumes being backed up:

Macintosh HD: Disk size: 999.70 GB - Disk used: 782.95 GB

Destinations:

T****s [Network] (Last used)

Total size: 5.93 TB

Total number of backups: 102

Oldest backup: 2016-02-26 03:55:33

Last backup: 2018-03-13 10:13:36


Top Processes by CPU:

Process (count) Source % of CPU
WindowServer Apple 10
kernel_task Apple 4
Box Sync Monitor Box, Inc. 2
Google Chrome Helper (16) Google, Inc. 2
Path Finder Dragan Milic 1


Top Processes by Memory:

Process (count) Source RAM usage
Google Chrome Helper (16) Google, Inc. 2.40 GB
kernel_task Apple 1.50 GB
Path Finder Dragan Milic 461 MB
mds_stores Apple 378 MB
Google Chrome Google, Inc. 351 MB


Top Processes by Network Use:

Process Source Input Output
ocspd Apple 136 MB 5 KB
mDNSResponder Apple 26 MB 9 MB
Dropbox Dropbox, Inc. 5 MB 7 MB
netbiosd Apple 5 MB 1 MB
apsd Apple 98 KB 61 KB


Top Processes by Energy Use:

Process (count) Source Energy usage (0-100)
WindowServer Apple 3
Box Sync Box, Inc. 2
Google Chrome Helper (16) Google, Inc. 2
Dropbox (4) Dropbox, Inc. 1
Box Sync Monitor Box, Inc. 1


Virtual Memory Information:

Available RAM 5.74 GB
Free RAM 183 MB
Used RAM 10.26 GB
Cached files 5.56 GB
Swap Used 132 MB


Software Installs (past 30 days):

Name Version Install Date
Yoink 3.4.1 2018-02-11
1Password 6.8.7 2018-02-23
Texpad 1.4.7 2018-02-23
OneDrive 17.005.0107 2018-02-26
Evernote 7.0.2 2018-03-01
ASUS Device Discovery 1.1.13 2018-03-05
ASUS Firmware Restoration 1.1.12 2018-03-05


Diagnostics Information (past 7 days):

2018-02-27 20:21:22 Last Shutdown Cause: 3 - Hard shutdown


End of report

MacBook Pro (Retina, 13-inch, Late 2013), iOS 11.2.6

Posted on

Reply

There’s more to the conversation

Read all replies

Page content loaded

Mar 13, 2018 10:55 AM in response to ConjugatePrior In response to ConjugatePrior

ConjugatePrior wrote:


I was cleaning up/organizing my laptop and ran several system checks. I have never disabled system integrity protection on my system, but to my surprise, I found the following:


$ csrutil status

System Integrity Protection status: enabled (Custom Configuration).


Configuration:

Apple Internal: disabled

Kext Signing: disabled

Filesystem Protections: enabled

Debugging Restrictions: enabled

DTrace Restrictions: enabled

NVRAM Protections: enabled

BaseSystem Verification: enabled



This is an unsupported configuration, likely to break in the future and leave your machine in an unknown state.


Any guesses as to what might have disabled the first two? (I didn't.) How concerned should I be about this? I haven't found anything similar to this situation via Google, so I really have no clue what happened here.



From terminal what is the output:


csrutil netboot list

Mar 13, 2018 10:55 AM

Reply Helpful

Mar 13, 2018 11:18 AM in response to leroydouglas In response to leroydouglas

Before I reset SIP with csrutil clear, is there any way to get more information, e.g., when this configuration change was made?


I'd like to understand what happened before I fix it. Is that unrealistic in this situation? Is it common with SIP for settings to invisibly change?


Thanks.

Mar 13, 2018 11:18 AM

Reply Helpful
User profile for user: ConjugatePrior

Question: SIP partially disabled by something. How?