3 ms·

You can have partially enabled SIP. With CSR = 0x01, SIP is fully enabled except kext signing, more secure then disabled SIP.

saagarjha 8y ago
Selectively disabling parts of SIP is unsupported, FYI
- auslander 8y ago
  What do you mean? You can always check: 'csrutil status'. I have all items enabled except kext signing.
  - saagarjha 8y ago
    Does csrutil status not give you the "This is an unsupported configuration, likely to break in the future and leave your machine in an unknown state." warning?
    - auslander 8y ago
      Warning, not error. And it shows the rest of protections enabled, good enough for me.
      - saagarjha 8y ago
        I guess if you’re willing to live dangerously it can’t hurt :)
        auslander 8y ago
        It is hackintosh. All guides tell you to disable SIP, so I live rather cautiously :)
- anoncake 8y ago
  So are Hackintoshs?
  - saagarjha 8y ago
    Apple shames you for doing that instead of telling you it's unsupported.
Wowfunhappy 8y ago
I mean, if you want SIP, you can leave it fully enabled and load all custom kernel extensions with Clover, as I mentioned. As I see it, if you're the kind of user who's installing Hackintosh, you're also probably savvy enough to not grant root permission to just any software. I want to have full control over my computer.