SIP cannot be disabled

Question

Level 1

12 points

SIP cannot be disabled

After trying numerous times starting from recovery mode and disable the system integrity protection and reboot, my macbook pro still could not able to disable the SIP.

Posted on Aug 27, 2018 6:10 PM

Reply

Answer 1

Top-ranking reply

Kappy

Level 10

361,855 points

Aug 27, 2018 6:11 PM in response to jakechak

Disable System Integrity Protection (SIP) - Rootless In OS X El Capitan - How To

Turning Off Rootless System Integrity Protection in OS X El Capitan 10.11.x or Later

Again, the vast majority of Mac users should not disable rootless. Disabling rootless is aimed exclusively at advanced Mac users. Do so at your own risk, this is not specifically recommended.

Reboot the Mac and hold down Command + R keys after the startup chime, this will boot OS X into Recovery HD.

When the Utility Menu appears, select the Terminal from the Utilities menu in the menubar.

Paste the following command into the terminal then hit return: csrutil disable; reboot

You’ll see a message saying that System Integrity Protection has been disabled, and the Mac needs to restart for changes to take effect. The Mac will then reboot itself automatically.

You can also issue the command by itself without the automatic reboot like so: csrutil disable

Once the Mac boots up again, System Integrity Protection will be disabled entirely in OS X.

Checking the Status of Rootless / System Integrity Protection in OS X

If you want to know the status of rootless before rebooting or without rebooting the Mac from the Recovery HD, just paste the following command into the Terminal: csrutil status

You’ll either see one of two messages:

$ csrutil status

$ System Integrity Protection status: enabled

or

$ csrutil status

$ System Integrity Protection status: disabled

If at any time you want to change the status of rootless, another reboot from the Recovery HD is required.

How to Re-Enable Rootless System Integrity Protection in OS X

Simply reboot the Mac again from the Recovery HD as directed above, but at the command line use the following syntax instead: csrutil enable

Just as before, a reboot of the Mac is required for changes to take effect.

Reply

Answer 2

jakechak Author

Level 1

12 points

Aug 27, 2018 7:12 PM in response to Grant Bennet-Alder

Thanks for the reply.

I have to use a software named SwitchResX which requires the SIP disabled.

So basically every time I finished pasting the 'csrutil disable' command in the terminal in recovery mode and reboot, I would try to use SwitchResX and it always shows that my SIP is still enabled so that it cannot be used.

Apart from that, I have also tried clicking the Apple menu while holding the option key to choose “System Information”, then scroll down the left side list and choose “Software” where it shows on the right side that the “System Integrity Protection” is enabled.

Reply