SIP partially disabled by something. How?
I was cleaning up/organizing my laptop and ran several system checks. I have never disabled system integrity protection on my system, but to my surprise, I found the following:
$ csrutil status
System Integrity Protection status: enabled (Custom Configuration).
Configuration:
Apple Internal: disabled
Kext Signing: disabled
Filesystem Protections: enabled
Debugging Restrictions: enabled
DTrace Restrictions: enabled
NVRAM Protections: enabled
BaseSystem Verification: enabled
This is an unsupported configuration, likely to break in the future and leave your machine in an unknown state.
Any guesses as to what might have disabled the first two? (I didn't.) How concerned should I be about this? I haven't found anything similar to this situation via Google, so I really have no clue what happened here.
Thanks!
EtreCheck version: 4.0.4 (4A150)
Report generated: 2018-03-13 11:02:08
Download EtreCheck from https://etrecheck.com
Runtime: 4:27
Performance: Good
Problem: No problem - just checking
Major Issues:
Anything that appears on this list needs immediate attention.
System Integrity Protection disabled - System Integrity Protection is disabled. This computer is at risk of malware infection.
Minor Issues:
These issues do not need immediate attention but they may indicate future problems.
Heavy RAM usage - This machine is using a large amount of RAM.
Unsigned files - There is unsigned software installed. It appears to be legitimate but should be reviewed.
System modifications - There are a large number of system modifications running in the background.
Hardware Information:
MacBook Pro (Retina, 13-inch, Late 2013)
MacBook Pro Model: MacBookPro11,1
1 2.8 GHz Intel Core i7 (i7-4558U) CPU: 2-core
16 RAM Not upgradeable
BANK 0/DIMM0
8 GB DDR3 1600 ok
BANK 1/DIMM0
8 GB DDR3 1600 ok
Battery: Health = Normal - Cycle count = 187
Video Information:
Intel Iris - VRAM: 1536 MB
Color LCD 3360 x 2100
Drives:
disk0 - APPLE SSD SM1024F 1.00 TB (Solid State - TRIM: Yes)
Internal PCI 5.0 GT/s x4 Serial ATA
disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
disk0s2 999.70 GB
disk1s1 - Macintosh HD (APFS) 999.70 GB 780.07 GB
disk1s2 - Preboot (APFS) [APFS Preboot] 999.70 GB 21 MB
disk1s3 - Recovery (APFS) [Recovery] 999.70 GB 510 MB
disk1s4 - VM (APFS) [APFS VM] 999.70 GB 2.15 GB
Mounted Volumes:
disk1s1 - Macintosh HD 999.70 GB (216.75 GB free)
APFS
Mount point: /
Encrypted
disk1s4 - VM [APFS VM] 999.70 GB (216.75 GB free)
APFS
Mount point: /private/var/vm
Network:
Interface usbmodem1421: Arduino Micro 2
Interface usbmodem1411: Arduino Micro
Interface en8: AX88179 USB 3.0 to Gigabit Ethernet
Interface en4: Thunderbolt Ethernet
Interface en0: Wi-Fi
802.11 a/b/g/n/ac
One IPv4 address
Interface usbmodem1: PX4 BL FMU v2.x
Interface en7: MiFi 5510
Interface en9: StarTech USB32DPPRO
Interface en10: iPhone
Interface en3: Bluetooth PAN
Interface bridge0: Thunderbolt Bridge
Interface en6: Apple USB Ethernet Adapter
Interface en5: AX88178
Interface en11: iPad
iCloud Quota: 615 MB available
System Software:
macOS High Sierra 10.13.3 (17D102)
Time since boot: About 13 days
System Load: 1.89 (1 min ago) 1.98 (5 min ago) 2.04 (15 min ago)
Security:
System | Status |
---|---|
Gatekeeper | Mac App Store and identified developers |
System Integrity Protection | enabled (Custom Configuration) |
Unsigned Files:
Launchd: /Library/LaunchAgents/org.gpgtools.macgpg2.fix.plist
Executable: /usr/local/MacGPG2/libexec/fixGpgHome
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/comp.text.tex.distribution.Helper.plist
Executable: /Library/PreferencePanes/TeXDistPrefPane.prefPane/Contents/Library/LaunchServic es/comp.text.tex.distribution.Helper --launch-service --version 271 --pid 1368
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/org.pqrs.Karabiner.load.plist
Executable: /Library/Application Support/org.pqrs/Karabiner/startup.sh start
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/net.culater.SIMBL.Agent.plist
Executable: /Library/ScriptingAdditions/SIMBL.osax/Contents/Resources/SIMBL Agent.app/Contents/MacOS/SIMBL Agent
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/org.gpgtools.gpgmail.enable-bundles.plist
Executable: /Library/Application Support/GPGTools/uuid-patcher enable-bundles
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/org.virtualbox.startup.plist
Executable: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/com.cisco.anyconnect.gui.plist
Executable: /Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app --wait-apps /Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist
Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.cisco.anyconnect.vpnagentd.plist
Executable: /opt/cisco/anyconnect/bin/vpnagentd -execv_instance
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist
Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/com.sony.WirelessAutoImportLauncher.agent.plist
Executable: /Library/Application Support/WirelessAutoImport/WirelessImporterDaemon
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/org.gpgtools.macgpg2.shutdown-gpg-agent.plist
Executable: /usr/local/MacGPG2/libexec/shutdown-gpg-agent
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/org.gpgtools.gpgmail.patch-uuid-user.plist
Executable: /Library/Application Support/GPGTools/uuid-patcher
Details: Exact match found in the whitelist - probably OK
Launchd: ~/Library/LaunchAgents/net.infinite-labs.SIMBLEnablerForSandboxedApps.plist
Executable: ~/Library/Application Support/Afloat/SIMBL Enabler for Sandboxed Apps.app/Contents/MacOS/SIMBL Enabler for Sandboxed Apps
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/org.gpgtools.gpgmail.patch-uuid.plist
Executable: /Library/Application Support/GPGTools/uuid-patcher
Details: Exact match found in the whitelist - probably OK
Launchd: ~/Library/LaunchAgents/org.virtualbox.vboxwebsrv.plist
Executable: /Applications/VirtualBox.app/Contents/MacOS/vboxwebsrv
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist
Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper
Details: Exact match found in the whitelist - probably OK
Kernel Extensions:
/Applications/ExpressVPN.app
[Not Loaded] ExpressVPNSplitTunnel.kext (1.0.2 - SDK 10.12)
/Applications/MATLAB_R2017b.app
[Not Loaded] sldrtkrn.kext (5.5.0 - OS X 10.8)
/Applications/Parallels Desktop.app
[Not Loaded] prl_hypervisor.kext (12.2.1 41615 - SDK 10.9)
[Not Loaded] prl_netbridge.kext (12.2.1 41615 - SDK 10.9)
[Not Loaded] prl_usb_connect.kext (12.2.1 41615 - SDK 10.9)
[Not Loaded] prl_vnic.kext (12.2.1 41615 - SDK 10.9)
/Applications/Wireless Auto Import.app
[Not Loaded] SONYDeviceType01.kext (1.2.00.01242 - SDK 10.6)
/Library/Application Support/VirtualBox
[Loaded] VBoxDrv.kext (5.2.6)
[Loaded] VBoxNetAdp.kext (5.2.6)
[Loaded] VBoxNetFlt.kext (5.2.6)
[Loaded] VBoxUSB.kext (5.2.6)
/Library/Application Support/org.pqrs/Karabiner
[Loaded] Karabiner.signed.kext (10.22.0 - SDK 10.12)
/Library/Extensions
[Not Loaded] LogitechHIDDevices.kext (3.9.5 - SDK 10.8)
[Not Loaded] LogitechUnifying.kext (1.3.5 - SDK 10.8)
[Not Loaded] AX88179_178A.kext (1.6.0 - SDK 10.9)
[Loaded] DisplayLinkDriver.kext (3.1.0 (82262) - SDK 10.9)
/System/Library/Extensions
[Not Loaded] FTDIUSBSerialDriver.kext (2.2.18 - SDK 10.6)
[Not Loaded] RT2870USBWirelessDriver.kext (4.2.9.2 - SDK 10.6)
[Loaded] MicrosoftMouse.kext (8.2)
[Not Loaded] OlympusDSSDriver.kext (2.0.0)
/System/Library/Extensions/MicrosoftMouse.kext/Contents/PlugIns
[Not Loaded] MicrosoftMouseBluetooth.kext (8.2)
[Loaded] MicrosoftMouseUSB.kext (8.2)
System Launch Agents:
[Not Loaded] | 9 Apple tasks |
[Loaded] | 155 Apple tasks |
[Running] | 126 Apple tasks |
System Launch Daemons:
[Not Loaded] | 35 Apple tasks |
[Loaded] | 166 Apple tasks |
[Running] | 131 Apple tasks |
Launch Agents:
[Loaded] | org.gpgtools.gpgmail.patch-uuid-user.plist (? 84ce07f2 - installed 2015-09-21) |
[Loaded] | org.gpgtools.Libmacgpg.xpc.plist (Lukas Pitschl - installed 2016-06-28) |
[Running] | org.gpgtools.macgpg2.shutdown-gpg-agent.plist (? df7bd0cf - installed 2016-06-28) |
[Loaded] | com.microsoft.update.agent.plist (Microsoft Corporation - installed 2018-01-25) |
[Not Loaded] | com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2017-12-12) |
[Loaded] | org.macosforge.xquartz.startx.plist (Apple Inc. - XQuartz - installed 2016-10-26) |
[Loaded] | org.gpgtools.gpgmail.enable-bundles.plist (? d032aea - installed 2015-09-21) |
[Running] | com.Logitech.Control Center.Daemon.plist (Logitech Inc. - installed 2016-10-04) |
[Running] | com.displaylink.useragent.plist (DisplayLink Corp - installed 2017-06-30) |
[Running] | com.sony.WirelessAutoImportLauncher.agent.plist (? c33fba7e - installed 2014-01-28) |
[Loaded] | com.google.keystone.agent.plist (Google, Inc. - installed 2018-02-03) |
[Not Loaded] | com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-01-24) |
[Not Loaded] | com.displaylink.useragent-prelogin.plist (DisplayLink Corp - installed 2017-06-30) |
[Loaded] | com.oracle.java.Java-Updater.plist (? a8e16b78 - installed 2017-12-19) |
[Loaded] | com.cisco.anyconnect.gui.plist (? 40bd3462 - installed 2015-08-27) |
[Loaded] | org.gpgtools.macgpg2.fix.plist (? d7ac5146 - installed 2016-06-28) |
[Loaded] | org.gpgtools.updater.plist (Lukas Pitschl - installed 2016-07-05) |
[Not Loaded] | net.culater.SIMBL.Agent.plist (? 850e6250 - installed 2014-09-13) |
Launch Daemons:
[Loaded] | org.gpgtools.gpgmail.patch-uuid.plist (? 42fc83f8 - installed 2015-09-21) |
[Loaded] | com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2018-01-25) |
[Not Loaded] | org.virtualbox.startup.plist (? 700b9385 - installed 2018-02-06) |
[Running] | com.cisco.anyconnect.vpnagentd.plist (? a7cbca7 - installed 2015-07-22) |
[Loaded] | com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-02-01) |
[Loaded] | com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2010-08-25) |
[Loaded] | com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2017-12-19) |
[Loaded] | org.macosforge.xquartz.privileged_startx.plist (Apple Inc. - XQuartz - installed 2016-10-26) |
[Running] | com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2018-01-24) |
[Loaded] | com.surteesstudios.Bartender.BartenderInstallHelper.plist (Surtees Studios Limited - installed 2015-10-09) |
[Running] | com.displaylink.displaylinkmanager.plist (DisplayLink Corp - installed 2017-06-30) |
[Loaded] | com.cocoatech.pathfinder.SMFHelper7.plist (Dragan Milic - installed 2016-10-07) |
[Loaded] | com.google.keystone.daemon.plist (Google, Inc. - installed 2018-03-05) |
[Loaded] | com.DesignScience.DSMTTool.plist (Design Science, Inc. - installed 2015-12-05) |
[Loaded] | com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2015-08-07) |
[Not Loaded] | org.pqrs.Karabiner.load.plist (? 44439558 - installed 2016-10-31) |
[Loaded] | comp.text.tex.distribution.Helper.plist (? 4f9d4c3e - installed 2018-02-23) |
User Launch Agents:
[Loaded] | com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2018-02-02) |
[Loaded] | com.adobe.ARM.de23d1e3aa2d00ce38d73f10fcbdc8dcaaaf6be989610710a1ddda77.plist (Adobe Systems, Inc. - installed 2017-11-01) |
[Not Loaded] | com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-01-24) |
[Running] | com.c-command.SpamSieve.LaunchAgent.plist (C-Command Software, LLC - installed 2017-08-24) |
[Not Loaded] | org.virtualbox.vboxwebsrv.plist (? 0 - installed 2018-01-15) |
[Loaded] | com.skype.skype.shareagent.plist (Skype Communications S.a.r.l - installed 2017-06-28) |
[Not Loaded] | net.infinite-labs.SIMBLEnablerForSandboxedApps.plist (? 0 - installed 2011-07-29) |
[Loaded] | com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2017-11-17) |
User Login Items:
HyperDock Helper Application (Mac App Store - installed 2017-01-18)
(/Applications/HyperDock.app/Contents/Library/LoginItems/HyperDock Helper.app)
Keyboard Maestro Engine Application (Stairways Software Pty Ltd - installed 2018-02-19)
(/Applications/Keyboard Maestro.app/Contents/MacOS/Keyboard Maestro Engine.app)
Flux Application (Michael Herf
(/Applications/Flux.app)
Karabiner Application (Fumihiko Takayama
(/Applications/Karabiner.app)
Dropbox Application (Dropbox, Inc.
(/Applications/Dropbox.app)
Fantastical Application (Mac App Store
(/Applications/Fantastical.app)
Spectacle Application (Eric Czarny
(/Applications/Spectacle.app)
Parallels Toolbox Application (Parallels International GmbH
(/Applications/Parallels Toolbox.app)
PopClip Application (Mac App Store
(/Applications/PopClip.app)
Box Sync Application (Box, Inc.
(/Applications/Box Sync.app)
iTunesHelper Application (Apple, Inc. - installed 2018-01-24)
(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
Shortcat Application
(/Applications/Shortcat.app)
SleepTime Application (Mac App Store
(/Applications/SleepTime.app)
Moom Application (Mac App Store
(/Applications/Moom.app)
witchdaemon Application (Mac App Store
(/Applications/Witch.app/Contents/PlugIns/Witch.prefPane/Contents/Helpers/witch daemon.app)
HazelHelper Application (Noodlesoft, LLC
(/Library/PreferencePanes/Hazel.prefPane/Contents/MacOS/HazelHelper.app)
Alfred 3 Application (Running with Crayons Ltd
(/Applications/Alfred 3.app)
GrowlLauncher SMLoginItem (Mac App Store - installed 2015-01-06)
(/Applications/Growl.app/Contents/Library/LoginItems/GrowlLauncher.app)
BartenderStartAtLoginHelper SMLoginItem (Surtees Studios Limited - installed 2018-03-01)
(/Applications/Bartender 3.app/Contents/Library/LoginItems/BartenderStartAtLoginHelper.app)
1Password mini SMLoginItem (Mac App Store - installed 2018-02-23)
(/Applications/1Password.app/Contents/Library/LoginItems/2BUA8C4S2C.com.agilebi ts.onepassword-osx-helper.app)
DegreesLaunchHelper SMLoginItem (Mac App Store - installed 2015-02-05)
(/Applications/Degrees.app/Contents/Library/LoginItems/DegreesLaunchHelper.app)
Internet Plug-ins:
npDDRia: 0.0.14.1 (installed 2014-02-21)
QuickTime Plugin: 7.7.3 (installed 2018-01-29)
AdobePDFViewerNPAPI: 11.0.23 (installed 2017-11-17)
AdobePDFViewer: 11.0.23 (installed 2017-11-17)
PMCADownloader: 1.2.1998.896 (installed 2014-08-29)
Flash Player: 28.0.0.161 (installed 2018-02-06)
SharePointBrowserPlugin: 14.7.7 (installed 2017-09-24)
FlashPlayer-10.6: 28.0.0.161 (installed 2018-02-06)
Mathematica: 10.0.0 (installed 2015-12-14)
JavaAppletPlugin: Java 8 Update 161 build 12 (installed 2018-02-27)
Audio Plug-ins:
BartenderAudioPlugIn: 1.0.0 (installed 2015-11-15)
Safari Extensions:
1Password.safariextz - AgileBits - https://agilebits.com/onepassword (installed 2017-12-13) |
OpenIE.safariextz - Parallels - http://www.parallels.com (installed 2014-08-28) |
3rd Party Preference Panes:
Default Folder X (installed 2015-09-22)
Device Detector (installed 2011-04-24)
Flash Player (installed 2018-02-01)
GPGPreferences (installed 2016-08-08)
Hazel (installed 2015-12-22)
HyperDock (installed 2017-04-07)
Java (installed 2018-02-27)
Logitech Control Center (installed 2017-01-31)
Microsoft Mouse (installed 2015-11-25)
SwitchResX (installed 2017-03-28)
TeXDistPrefPane (installed 2015-07-13)
Time Machine:
Skip System Files: No
Mobile backups:
Auto backup: Yes
Volumes being backed up:
Macintosh HD: Disk size: 999.70 GB - Disk used: 782.95 GB
Destinations:
T****s [Network] (Last used)
Total size: 5.93 TB
Total number of backups: 102
Oldest backup: 2016-02-26 03:55:33
Last backup: 2018-03-13 10:13:36
Top Processes by CPU:
Process (count) | Source | % of CPU |
WindowServer | Apple | 10 |
kernel_task | Apple | 4 |
Box Sync Monitor | Box, Inc. | 2 |
Google Chrome Helper (16) | Google, Inc. | 2 |
Path Finder | Dragan Milic | 1 |
Top Processes by Memory:
Process (count) | Source | RAM usage |
Google Chrome Helper (16) | Google, Inc. | 2.40 GB |
kernel_task | Apple | 1.50 GB |
Path Finder | Dragan Milic | 461 MB |
mds_stores | Apple | 378 MB |
Google Chrome | Google, Inc. | 351 MB |
Top Processes by Network Use:
Process | Source | Input | Output |
ocspd | Apple | 136 MB | 5 KB |
mDNSResponder | Apple | 26 MB | 9 MB |
Dropbox | Dropbox, Inc. | 5 MB | 7 MB |
netbiosd | Apple | 5 MB | 1 MB |
apsd | Apple | 98 KB | 61 KB |
Top Processes by Energy Use:
Process (count) | Source | Energy usage (0-100) |
WindowServer | Apple | 3 |
Box Sync | Box, Inc. | 2 |
Google Chrome Helper (16) | Google, Inc. | 2 |
Dropbox (4) | Dropbox, Inc. | 1 |
Box Sync Monitor | Box, Inc. | 1 |
Virtual Memory Information:
Available RAM | 5.74 GB |
Free RAM | 183 MB |
Used RAM | 10.26 GB |
Cached files | 5.56 GB |
Swap Used | 132 MB |
Software Installs (past 30 days):
Name | Version | Install Date |
Yoink | 3.4.1 | 2018-02-11 |
1Password | 6.8.7 | 2018-02-23 |
Texpad | 1.4.7 | 2018-02-23 |
OneDrive | 17.005.0107 | 2018-02-26 |
Evernote | 7.0.2 | 2018-03-01 |
ASUS Device Discovery | 1.1.13 | 2018-03-05 |
ASUS Firmware Restoration | 1.1.12 | 2018-03-05 |
Diagnostics Information (past 7 days):
2018-02-27 20:21:22 Last Shutdown Cause: 3 - Hard shutdown
End of report
MacBook Pro (Retina, 13-inch, Late 2013), iOS 11.2.6