3 ms·
System Integrity Protection sounds really important. What does it do normally, and why does this tool require it to be disabled?
by skibz 3y ago
System Integrity Protection sounds really important. What does it do normally, and why does this tool require it to be disabled?
- bzzzt 3y agoIt's meant to protect the base OS from persistent malware infections. https://support.apple.com/en-us/102149 https://support.apple.com/en-us/102149
- astrange 3y agoAlso against accidentally deleting /usr.
- highwaylights 3y agoSIP is secure boot for macOS. It's intended to prevent malware from changing system files due to rogue permissions or escalation. With SIP enabled, even the root/sudo user doesn't have rights to change these files. It also refuses to boot a system with drivers that are not signed by Apple, so as to deter malware from using drivers as an attack vector. https://en.wikipedia.org/wiki/System_Integrity_Protection https://en.wikipedia.org/wiki/System_Integrity_Protection
- abujazar 3y ago> SIP is secure boot for macOS. Not really. «Secure Boot» is intended to secure the boot process through signature verification. However the security model is completely broken, https://arstechnica.com/information-technology/2023/03/unkillable-uefi-malware-bypassing-secure-boot-enabled-by-unpatchable-windows-flaw/amp/ https://arstechnica.com/information-technology/2023/03/unkil... SIP is a protection layer which protects system files from modification also after the system is booted.
- saagarjha 3y agoApple ships a non-broken secure boot, unlike almost everyone else.