3 ms·
While we're here, does anyone know a way to keep FileVault enabled with SIP disabled? It seems like a huge anti-privacy measure from Apple. Want control of your
by echelon_musk 4y ago
While we're here, does anyone know a way to keep FileVault enabled with SIP disabled? It seems like a huge anti-privacy measure from Apple. Want control of your system? No FDE for you!
- duskwuff 4y ago> While we're here, does anyone know a way to keep FileVault enabled with SIP disabled? File Vault works independently of SIP. There's no conflict.
- echelon_musk 4y agoI confused SIP with SSV! With SSV disabled it's impossible.
- deleted 4y ago[deleted]
- duskwuff 4y agoThat part is correct, and it's to save you from doing something rather dangerous. On modern macOS systems, the system volume is not encrypted. If SSV is disabled, there's nothing to prevent the (potentially modified) system from exfiltrating your password and/or your encrypted data after you log in -- File Vault would be unable to provide any substantial security guarantees in this configuration. Now, because you can modify the system, you could probably bypass this check, or work around it (e.g. by mounting an encrypted volume during startup). But you should probably think very carefully about what attacks you're permitting before you do that.