Skip to content

Instantly share code, notes, and snippets.

@darwin
Last active February 14, 2023 13:27
Show Gist options
  • Save darwin/8e9192f0f2996b0f77c103e6bade1d9f to your computer and use it in GitHub Desktop.
Save darwin/8e9192f0f2996b0f77c103e6bade1d9f to your computer and use it in GitHub Desktop.

Revisions

  1. darwin revised this gist Nov 25, 2020. 1 changed file with 4 additions and 0 deletions.
    4 changes: 4 additions & 0 deletions version.txt
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,4 @@
    ❯ sw_vers
    ProductName: macOS
    ProductVersion: 11.1
    BuildVersion: 20C5048k
  2. darwin revised this gist Nov 25, 2020. 3 changed files with 26 additions and 1 deletion.
    19 changes: 19 additions & 0 deletions 1_unexpected.txt
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,19 @@
    # in recovery mode
    ❯ csrutil enable --without debug

    # note that prior macOS 11.0 this would disable "Debugging Restrictions"
    # since macOS 11.0 it seems to be disabling "Apple Internal" and "Filesystem Protections"

    ❯ csrutil status
    System Integrity Protection status: unknown (Custom Configuration).

    Configuration:
    Apple Internal: disabled
    Kext Signing: enabled
    Filesystem Protections: disabled
    Debugging Restrictions: enabled
    DTrace Restrictions: enabled
    NVRAM Protections: enabled
    BaseSystem Verification: enabled

    This is an unsupported configuration, likely to break in the future and leave your machine in an unknown state.
    7 changes: 6 additions & 1 deletion status.txt → 2_workaround.txt
    Original file line number Diff line number Diff line change
    @@ -1,11 +1,16 @@
    # in recovery mode
    ❯ csrutil disable --with kext --with dtrace --with nvram --with basesystem

    # this seems to do what we wanted, not sure what Apple Internal does

    ❯ csrutil status
    System Integrity Protection status: unknown (Custom Configuration).

    Configuration:
    Apple Internal: disabled
    Kext Signing: enabled
    Filesystem Protections: disabled
    Debugging Restrictions: enabled
    Debugging Restrictions: disabled
    DTrace Restrictions: enabled
    NVRAM Protections: enabled
    BaseSystem Verification: enabled
    1 change: 1 addition & 0 deletions _readme.md
    Original file line number Diff line number Diff line change
    @@ -0,0 +1 @@
    Credits: https://github.com/koekeishiya/yabai/wiki/Disabling-System-Integrity-Protection
  3. darwin created this gist Nov 25, 2020.
    13 changes: 13 additions & 0 deletions status.txt
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,13 @@
    ❯ csrutil status
    System Integrity Protection status: unknown (Custom Configuration).

    Configuration:
    Apple Internal: disabled
    Kext Signing: enabled
    Filesystem Protections: disabled
    Debugging Restrictions: enabled
    DTrace Restrictions: enabled
    NVRAM Protections: enabled
    BaseSystem Verification: enabled

    This is an unsupported configuration, likely to break in the future and leave your machine in an unknown state.