> Could this be an issue for things like homebrew or ruby/rbenv? /usr/local is not one of the SIP protected paths. The idea behind SIP is to protect system bin

> Could this be an issue for things like homebrew or ruby/rbenv? /usr/local is not one of the SIP protected paths. The idea behind SIP is to protect system binaries from being surreptitiously patched by malicious parties, not to make the system totally useless. > Reading about it, one might think 10.11 could have problems with someone trying to use anything but the system-shipped ruby version, or python, etc. Aside from being really stupid from a customer standpoint, what would be the security benefit of doing this?