{"id":45473,"date":"2018-08-07T10:09:42","date_gmt":"2018-08-07T15:09:42","guid":{"rendered":"https:\/\/eshop.macsales.com\/blog\/?p=45473"},"modified":"2019-09-13T14:24:54","modified_gmt":"2019-09-13T19:24:54","slug":"we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it","status":"publish","type":"post","link":"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/","title":{"rendered":"We Explain What System Integrity Protection on Mac is and How to Control It"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignright wp-image-52969 size-full\" src=\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/Terminalicon-284x271.jpg\" alt=\"Terminal Icon\" width=\"284\" height=\"271\" srcset=\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/Terminalicon-284x271.jpg 284w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/Terminalicon-284x271-126x120.jpg 126w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/Terminalicon-284x271-190x181.jpg 190w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/Terminalicon-284x271-126x120@2x.jpg 252w\" sizes=\"auto, (max-width: 284px) 100vw, 284px\" \/>Originally introduced with OS X El Capitan, System Integrity Protection, usually referred to as SIP, is a security feature built into the Mac operating system that\u2019s designed to protect most system locations, system processes, and <a href=\"https:\/\/eshop.macsales.com\/blog\/39112-rocket-yard-guide-understanding-troubleshooting-kernel-panics\">Kernel extensions<\/a>&nbsp;from being written to, modified, or replaced.<\/p>\n<p>SIP and related security protections in the Mac operating system have undergone changes with each release of the OS, but the basics of how the SIP system works have remained the same, including how SIP can be enabled, disabled, and have its current status checked on.<\/p>\n<p><strong>Rootless, More or Less<\/strong><br \/>\nOS X El Capitan was the first version of the Mac operating system to incorporate SIP, as well as the idea that <a href=\"https:\/\/eshop.macsales.com\/blog\/30985-preview-what-to-expect-at-the-wwdc-2015-keynote\">the Mac operating system was now rootless<\/a>; that is, there was no longer a root account, the all-powerful primary account that had access to almost the entire system. But it turns out the concept of the Mac being rootless was more of a security marketing gimmick than actual fact. There was still a root account; the difference is that when enabled, SIP poses additional restrictions on the root account, walling off certain portions of the system from access by an account with root level privileges.<\/p>\n<p>The additional isolation of system components from accounts with root privileges helps to prevent malware from being able to gain access to the system, where it could embed itself and take advantage of all of the system services running on a Mac.<\/p>\n<p><strong>System Integrity Protection (SIP)<\/strong><br \/>\nWhile \u201crootless\u201d was mostly marketing, SIP actually hardened the Mac by preventing modifications to the following locations:<\/p>\n<ul>\n<li>\/System<\/li>\n<li>\/usr<\/li>\n<li>\/bin<\/li>\n<li>\/sbin<\/li>\n<li>All apps preinstalled by Apple<\/li>\n<\/ul>\n<p>The exceptions to the rule are apps or processes that have been signed by Apple and have a special entitlement to write to system files. This includes Apple installers and Apple software update services.<\/p>\n<p>SIP is effective at stopping system locations from being written to by third-party apps and services. Only Apple-signed system processes can write to system locations.<\/p>\n<p>System processes can&#8217;t be attached to. This prevents code injection or runtime attachment to system processes, techniques often used by malware to force privileged processes to run the malware code.<\/p>\n<p>Kernel extensions must be signed with an Apple Developer ID that specifically allows for signed Kext (kernel extensions) certificates. This can prevent kernel extensions from being replaced or modified by malware, as well as prevent new unsigned kernel extensions from being installed.<\/p>\n<p><strong>SIP in macOS Mojave<\/strong><br \/>\nApple includes a number of new security-related <a href=\"https:\/\/eshop.macsales.com\/blog\/45136-mess-up-your-desktop-with-6-of-our-favorite-hidden-macos-mojave-features\">upgrades in Mojave<\/a>, but for SIP the big change is that it was extended to cover third-party apps and not just those supplied by Apple. This should protect third-party apps from being tampered with, having code injected, or having processes attached to them, all common techniques for gaining control of an app or its services.<\/p>\n<p><strong>Is SIP a Good Thing?<\/strong><br \/>\nWithout a doubt, SIP helps keep your Mac secure by preventing many malware attack vectors from being successfully performed. But like anything that brings restrictions to your Mac, there will be some fallout.<\/p>\n<p>In the case of SIP, the most often cited problem is the failure of a legitimate app to install properly, or for an app to have some issues once installed.<\/p>\n<p>For the most part, these app-specific issues were a problem when El Capitan rolled out and are far less of an issue now that developers have had time to work through the issues and create new ways for their apps to work with SIP restrictions.<\/p>\n<p>The benefit for all users is that the <a href=\"https:\/\/eshop.macsales.com\/blog\/40166-tech-101-do-macs-need-antivirus-or-anti-malware-software\">Mac is a harder platform for malware to take over<\/a>, though it is by no means an impossible task. Malware developers will always find new ways to attack a platform.<\/p>\n<p><strong>Controlling SIP<\/strong><br \/>\nAlthough Apple would like you to always keep SIP turned on, it can be enabled and disabled as needed. In the early days of El Capitan, it wasn\u2019t uncommon to disable SIP to allow a specific app to successfully install needed components in the various protected system folders. Once the install was complete, SIP could be turned back on to protect your Mac.<\/p>\n<figure id=\"attachment_52971\" aria-describedby=\"caption-attachment-52971\" style=\"width: 640px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-52971 size-full\" src=\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/csrutilStatus640-1.jpg\" alt=\"Terminal showing csrutil command\" width=\"640\" height=\"194\" srcset=\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/csrutilStatus640-1.jpg 640w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/csrutilStatus640-1-284x86.jpg 284w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/csrutilStatus640-1-190x58.jpg 190w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/csrutilStatus640-1-284x86@2x.jpg 568w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/csrutilStatus640-1-190x58@2x.jpg 380w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><figcaption id=\"caption-attachment-52971\" class=\"wp-caption-text\"><strong>(You can check the current status of SIP at any time using the Terminal app. However, you can only change SIP settings when booted from the Recovery volume.)<\/strong><\/figcaption><\/figure>\n<p>This SIP enable and disable dance has fallen by the wayside as developers found ways to work with the SIP system. However, if you have a specific need to disable, enable, or check the status of the SIP system, you can do so with these instructions.<\/p>\n<p><strong>Check current SIP status<\/strong>:<\/p>\n<p>Launch&nbsp;<a href=\"https:\/\/eshop.macsales.com\/blog\/39296-tech-101-introduction-to-the-macs-terminal-app-part-one\">Terminal<\/a>, located at \/Applications\/Utilities.<\/p>\n<p>At the Terminal prompt, enter the following:<\/p>\n<p>csrutil status<\/p>\n<p>Press Enter or Return.<\/p>\n<p>Terminal should respond with one of the following messages: &#8220;System Integrity Protection status: enabled&#8221; or &#8220;System Integrity Protection status: disabled.&#8221;<\/p>\n<p><strong>Enable or Disable SIP:<\/strong><\/p>\n<p>SIP can&#8217;t be enabled or disabled directly from within the currently running version of the Mac OS; instead, the Recovery volume is used to add a boot argument to your Mac&#8217;s <a href=\"https:\/\/eshop.macsales.com\/blog\/35820-add-these-steps-to-your-toolbox-when-troubleshooting-issues-on-a-mac\">NVRAM<\/a>&nbsp;that controls the SIP system.<\/p>\n<p>Because SIP is controlled through the Mac&#8217;s NVRAM, enabling or disabling SIP affects all versions of the Mac operating system you\u2019ve installed. If you disable SIP to allow an app to be installed in OS X El Capitan, SIP will also be disabled if you should boot into macOS Mojave that you installed on another volume. SIP is a global setting that affects all systems installed on your Mac.<\/p>\n<figure id=\"attachment_52972\" aria-describedby=\"caption-attachment-52972\" style=\"width: 640px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-52972 size-full\" src=\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/RecoveryUtility640-1.jpg\" alt=\"macOS revovery utility\" width=\"640\" height=\"372\" srcset=\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/RecoveryUtility640-1.jpg 640w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/RecoveryUtility640-1-206x120.jpg 206w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/RecoveryUtility640-1-284x165.jpg 284w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/RecoveryUtility640-1-190x110.jpg 190w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/RecoveryUtility640-1-206x120@2x.jpg 412w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/RecoveryUtility640-1-284x165@2x.jpg 568w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/RecoveryUtility640-1-190x110@2x.jpg 380w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><figcaption id=\"caption-attachment-52972\" class=\"wp-caption-text\"><strong>(Once the Mac boots from the Recovery volume, you can use the Terminal app to manipulate the SIP settings.)<\/strong><\/figcaption><\/figure>\n<p>To enable or disable SIP, you\u2019ll need to restart your Mac using the Recovery volume. Make sure you\u2019ve closed all open apps, and then follow these instructions:<\/p>\n<p>Restart your Mac. Once your Mac has finished shutting down, hold down the option key while your Mac starts up.<\/p>\n<p>The Mac&#8217;s boot manager will appear, listing all of the bootable volumes you can start from.<\/p>\n<p>Use the arrow keys to highlight the Recovery volume, then hit return or enter on your keyboard.<\/p>\n<p>Your Mac will boot from the Recovery volume and display the Recovery Utility window.<\/p>\n<p>Select Terminal from the Utilities menu.<\/p>\n<p>The Terminal window will open.<\/p>\n<p>At the Terminal prompt, enter either:<\/p>\n<p>csrutil disable<\/p>\n<p>to turn SIP off, or:<\/p>\n<p>csrutil enable<\/p>\n<p>to turn SIP on.<\/p>\n<p>After you enter one of the above commands, hit enter or return on the keyboard.<\/p>\n<p>Terminal will respond by telling you it has either successfully disabled or enabled SIP.<\/p>\n<figure id=\"attachment_52973\" aria-describedby=\"caption-attachment-52973\" style=\"width: 640px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-52973 size-full\" src=\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/csrutilDisable640-1.jpg\" alt=\"The csrutil command is used to enable or disable SIP\" width=\"640\" height=\"224\" srcset=\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/csrutilDisable640-1.jpg 640w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/csrutilDisable640-1-284x99.jpg 284w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/csrutilDisable640-1-190x67.jpg 190w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/csrutilDisable640-1-284x99@2x.jpg 568w, https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/08\/csrutilDisable640-1-190x67@2x.jpg 380w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><figcaption id=\"caption-attachment-52973\" class=\"wp-caption-text\"><strong>(The <\/strong>csrutil<strong> command is used to enable or disable SIP.)<\/strong><\/figcaption><\/figure>\n<p>For the changes to take effect, you must restart your Mac.<\/p>\n<p>Close Terminal by selecting Quit Terminal from the Terminal menu.<\/p>\n<p>From the Apple menu, select Restart.<\/p>\n<p>Your Mac will restart with SIP set to be enabled or disabled, depending on which command you used.<\/p>\n<p><strong>SIP Best Practice<\/strong><br \/>\nMost modern apps and their installers have become good SIP citizens, and won&#8217;t require you to disable SIP to perform an install. There are, of course, exceptions, especially with some popular Mac system and file utilities that require changes to be made in various system locations that SIP protects.<\/p>\n<p>In order to install these types of apps, SIP will need to be disabled, the Mac restarted, the app installed, Sip enabled, and the Mac restarted.<\/p>\n<p>You\u2019ll find all the instructions you need to perform these tasks in this article, above. But before you proceed, ensure the following:<\/p>\n<p>You really need the app in question. Is there a newer version or a similar app that doesn\u2019t require alterations to the system, or disabling SIP to install?<\/p>\n<p>If you must install an app that needs SIP disabled, make sure you\u2019ve acquired the app from a safe source; direct from the developer is usually the preferred method. Remember that apps that require SIP to be disabled will be a target for malware distributors to use as a Trojan horse to hide within so they can infect your Mac while SIP is turned off.<\/p>\n<p>Before you install an app that needs SIP to be disabled, make sure you have a current system backup or clone that could be used to restore from should the need arise.<\/p>\n<p>After the app is installed, immediately enable SIP. Do this before using the newly installed app.<\/p>\n<p>Enjoy your new app.<\/p>\n<p><strong><i>One last note<\/i><\/strong>: Future updates of the Mac operating system may restore system files and locations to the state expected by Apple, causing non-SIP-complaint apps to be marked as unsupported and possibly removed by a system update.<\/p>\n<p>You may need to contact the app developer for a newer version to reinstall. Hopefully, they will have updated the app to work within the Mac&#8217;s new security frameworks.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Originally introduced with OS X El Capitan, System Integrity Protection, usually referred to as SIP, is a security feature built into the Mac operating system that\u2019s designed to protect most system locations, system processes, and Kernel extensions&nbsp;from being written to, modified, or replaced. SIP and related security protections in the Mac operating system have undergone [&hellip;]<\/p>\n","protected":false},"author":97,"featured_media":45191,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"spay_email":"","footnotes":""},"categories":[4],"class_list":["post-45473","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech-tips"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.2 (Yoast SEO v20.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>System Integrity Protection on a Mac and How to Control It<\/title>\n<meta name=\"description\" content=\"Originally introduced with OS X El Capitan, System Integrity Protection, usually referred to as SIP, is a security feature built into the Mac operating system.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"We Explain What System Integrity Protection on Mac is and How to Control It\" \/>\n<meta property=\"og:description\" content=\"Originally introduced with OS X El Capitan, System Integrity Protection, usually referred to as SIP, is a security feature built into the Mac operating system.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/\" \/>\n<meta property=\"og:site_name\" content=\"Rocket Yard\" \/>\n<meta property=\"article:published_time\" content=\"2018-08-07T15:09:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-09-13T19:24:54+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/07\/Terminalicon-284x2711-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"284\" \/>\n\t<meta property=\"og:image:height\" content=\"271\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Tom Nelson\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tom Nelson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/\"},\"author\":{\"name\":\"Tom Nelson\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/647f465acd469444183711d2a22648cb\"},\"headline\":\"We Explain What System Integrity Protection on Mac is and How to Control It\",\"datePublished\":\"2018-08-07T15:09:42+00:00\",\"dateModified\":\"2019-09-13T19:24:54+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/\"},\"wordCount\":1504,\"commentCount\":10,\"publisher\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#organization\"},\"keywords\":[\"Recovery\",\"Security\",\"SIP\",\"System Integrity Protection\",\"Terminal\"],\"articleSection\":[\"Tech Tips\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/\",\"url\":\"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/\",\"name\":\"System Integrity Protection on a Mac and How to Control It\",\"isPartOf\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#website\"},\"datePublished\":\"2018-08-07T15:09:42+00:00\",\"dateModified\":\"2019-09-13T19:24:54+00:00\",\"description\":\"Originally introduced with OS X El Capitan, System Integrity Protection, usually referred to as SIP, is a security feature built into the Mac operating system.\",\"breadcrumb\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/eshop.macsales.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"We Explain What System Integrity Protection on Mac is and How to Control It\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#website\",\"url\":\"https:\/\/eshop.macsales.com\/blog\/\",\"name\":\"Rocket Yard\",\"description\":\"Your source for expert tips, special deals, commentary, reviews, and the latest tech news.\",\"publisher\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/eshop.macsales.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#organization\",\"name\":\"OWC\",\"url\":\"https:\/\/eshop.macsales.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2020\/06\/rocket-yard-logo-round.png\",\"contentUrl\":\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2020\/06\/rocket-yard-logo-round.png\",\"width\":1024,\"height\":1024,\"caption\":\"OWC\"},\"image\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/647f465acd469444183711d2a22648cb\",\"name\":\"Tom Nelson\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/cb537829ec9582eb81bd2dcf5c7e88d981ed66bd6f65dd36508faf46d38ba5a9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/cb537829ec9582eb81bd2dcf5c7e88d981ed66bd6f65dd36508faf46d38ba5a9?s=96&d=mm&r=g\",\"caption\":\"Tom Nelson\"},\"description\":\"Tom has been an enthusiastic Mac user since the Mac Plus. He\u2019s also been known to dabble in the dark side, otherwise known as Windows, and has a well-deserved reputation for being able to explain almost anything to anybody. Tom\u2019s background includes more than 30 years as an engineer, programmer, network manager, software tester, software reviewer, database designer, and computer network and systems designer. His online experience includes working as a sysop, forum leader, writer, and software library manager.\",\"sameAs\":[\"http:\/\/rocketyard.com\"],\"url\":\"https:\/\/eshop.macsales.com\/blog\/author\/tom-n\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"System Integrity Protection on a Mac and How to Control It","description":"Originally introduced with OS X El Capitan, System Integrity Protection, usually referred to as SIP, is a security feature built into the Mac operating system.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/","og_locale":"en_US","og_type":"article","og_title":"We Explain What System Integrity Protection on Mac is and How to Control It","og_description":"Originally introduced with OS X El Capitan, System Integrity Protection, usually referred to as SIP, is a security feature built into the Mac operating system.","og_url":"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/","og_site_name":"Rocket Yard","article_published_time":"2018-08-07T15:09:42+00:00","article_modified_time":"2019-09-13T19:24:54+00:00","og_image":[{"width":284,"height":271,"url":"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/07\/Terminalicon-284x2711-1.jpg","type":"image\/jpeg"}],"author":"Tom Nelson","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Tom Nelson","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/#article","isPartOf":{"@id":"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/"},"author":{"name":"Tom Nelson","@id":"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/647f465acd469444183711d2a22648cb"},"headline":"We Explain What System Integrity Protection on Mac is and How to Control It","datePublished":"2018-08-07T15:09:42+00:00","dateModified":"2019-09-13T19:24:54+00:00","mainEntityOfPage":{"@id":"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/"},"wordCount":1504,"commentCount":10,"publisher":{"@id":"https:\/\/eshop.macsales.com\/blog\/#organization"},"keywords":["Recovery","Security","SIP","System Integrity Protection","Terminal"],"articleSection":["Tech Tips"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/","url":"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/","name":"System Integrity Protection on a Mac and How to Control It","isPartOf":{"@id":"https:\/\/eshop.macsales.com\/blog\/#website"},"datePublished":"2018-08-07T15:09:42+00:00","dateModified":"2019-09-13T19:24:54+00:00","description":"Originally introduced with OS X El Capitan, System Integrity Protection, usually referred to as SIP, is a security feature built into the Mac operating system.","breadcrumb":{"@id":"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/eshop.macsales.com\/blog\/45473-we-explain-what-system-integrity-protection-on-mac-is-and-how-to-control-it\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/eshop.macsales.com\/blog\/"},{"@type":"ListItem","position":2,"name":"We Explain What System Integrity Protection on Mac is and How to Control It"}]},{"@type":"WebSite","@id":"https:\/\/eshop.macsales.com\/blog\/#website","url":"https:\/\/eshop.macsales.com\/blog\/","name":"Rocket Yard","description":"Your source for expert tips, special deals, commentary, reviews, and the latest tech news.","publisher":{"@id":"https:\/\/eshop.macsales.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/eshop.macsales.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/eshop.macsales.com\/blog\/#organization","name":"OWC","url":"https:\/\/eshop.macsales.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/eshop.macsales.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2020\/06\/rocket-yard-logo-round.png","contentUrl":"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2020\/06\/rocket-yard-logo-round.png","width":1024,"height":1024,"caption":"OWC"},"image":{"@id":"https:\/\/eshop.macsales.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/647f465acd469444183711d2a22648cb","name":"Tom Nelson","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/cb537829ec9582eb81bd2dcf5c7e88d981ed66bd6f65dd36508faf46d38ba5a9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cb537829ec9582eb81bd2dcf5c7e88d981ed66bd6f65dd36508faf46d38ba5a9?s=96&d=mm&r=g","caption":"Tom Nelson"},"description":"Tom has been an enthusiastic Mac user since the Mac Plus. He\u2019s also been known to dabble in the dark side, otherwise known as Windows, and has a well-deserved reputation for being able to explain almost anything to anybody. Tom\u2019s background includes more than 30 years as an engineer, programmer, network manager, software tester, software reviewer, database designer, and computer network and systems designer. His online experience includes working as a sysop, forum leader, writer, and software library manager.","sameAs":["http:\/\/rocketyard.com"],"url":"https:\/\/eshop.macsales.com\/blog\/author\/tom-n\/"}]}},"jetpack_featured_media_url":"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/07\/Terminalicon-284x2711-1.jpg","jetpack_shortlink":"https:\/\/wp.me\/pmPaT-bPr","_links":{"self":[{"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/posts\/45473","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/users\/97"}],"replies":[{"embeddable":true,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/comments?post=45473"}],"version-history":[{"count":3,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/posts\/45473\/revisions"}],"predecessor-version":[{"id":52974,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/posts\/45473\/revisions\/52974"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/media\/45191"}],"wp:attachment":[{"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/media?parent=45473"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/categories?post=45473"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}