3 ms·

SIP is quite terrible. Requiring an access level higher than root to access system files, and only processes that are signed by Apple and have special entitleme

SIP is quite terrible. Requiring an access level higher than root to access system files, and only processes that are signed by Apple and have special entitlements can have that access level? It's my computer, I should be at the top of the permissions totem pole, not Apple. If they're dead set on using signing to enforce the higher-than-root level, then I should be the one signing the executables. Fortunately, you can disable this crap.

sitharus 2y ago
SIP is wonderful. I no longer have to completely repave machines after my family install crapware because I know it can't mess with the base system. But for those of us who need that access we can disable it, with a bit of a dance to make it hard for people who _don't_ need it.
astrange 2y ago
Do you want OS updates to work or not? They can't work if you randomly edit files.
favorited 2y ago
> It's my computer, I should be at the top of the permissions totem pole, not Apple Here are the instructions to enable logging in as root, since privilege escalation seems inconvenient for you: https://support.apple.com/en-us/102367 https://support.apple.com/en-us/102367
- CGamesPlay 2y ago
  This does not allow you to modify SIP-protected files.
  - favorited 2y ago
    Of course it doesn't, SIP would be pointless if it did. But since GP is so opposed to temporarily disabling SIP when they need escalated permissions, I assume they must feel the same way about needing to `sudo` and enter their password.
bitwize 2y ago
Then use Linux. "General purpose computing" is a niche market. Most buyers would be more than content with a machine that lets them run the specific software they need for their specific use cases, and otherwise protects them from executing malicious code. Joanna Rutkowska's "evil maid attack" is a real security threat; and one of the edges that Apple has in the marketplace is being one of the first vendors to design practical, evil-maid-resistant personal computers.
KerrAvon 2y ago
Genuinely curious, what are you doing that requires you to turn SIP off? I'd have thought only OS developers and maybe forensics people of various stripes need to do that.
- bitwize 2y ago
  It's the principle of the thing! This aggression will not stand, man!

sitharus 2y ago

SIP is wonderful. I no longer have to completely repave machines after my family install crapware because I know it can't mess with the base system. But for those of us who need that access we can disable it, with a bit of a dance to make it hard for people who _don't_ need it.

astrange 2y ago

Do you want OS updates to work or not? They can't work if you randomly edit files.

favorited 2y ago

> It's my computer, I should be at the top of the permissions totem pole, not Apple Here are the instructions to enable logging in as root, since privilege escalation seems inconvenient for you: https://support.apple.com/en-us/102367 https://support.apple.com/en-us/102367

CGamesPlay 2y ago
This does not allow you to modify SIP-protected files.
- favorited 2y ago
  Of course it doesn't, SIP would be pointless if it did. But since GP is so opposed to temporarily disabling SIP when they need escalated permissions, I assume they must feel the same way about needing to `sudo` and enter their password.

bitwize 2y ago

Then use Linux. "General purpose computing" is a niche market. Most buyers would be more than content with a machine that lets them run the specific software they need for their specific use cases, and otherwise protects them from executing malicious code. Joanna Rutkowska's "evil maid attack" is a real security threat; and one of the edges that Apple has in the marketplace is being one of the first vendors to design practical, evil-maid-resistant personal computers.

KerrAvon 2y ago

Genuinely curious, what are you doing that requires you to turn SIP off? I'd have thought only OS developers and maybe forensics people of various stripes need to do that.

bitwize 2y ago
It's the principle of the thing! This aggression will not stand, man!