2 ms·

Until you install a piece of niche software that corrupts your entire system when installing it with SIP turned off… https://support.google.com/chrome/thread/1

• Wowfunhappy 1y ago
  Because Google majorly screwed up, in a piece of software that runs with administrator privileges! Why the heck was it running with those privileges in the first place?! It's kind of nuts that Google faced basically no blow-back for rendering people's systems unbootable. The Chrome updater could also have had a bug that completely deletes your home directory, and SIP wouldn't protect you. I guess your computer would still boot in that case, but how much would you care? The actual damage would be worse. Anyway, this entire incident was notable precisely because it was so unusual—in ~9 years of SIP I'm not aware of any other instances where turning it off caused problems.
  • saagarjha 1y ago
    It is trivial to escalate to root and then do precisely that when SIP is disabled.
    • Wowfunhappy 1y ago
      That's because more recently Apple introduced an entitlement to make that trivial, right? I wish they hadn't done that.
      • saagarjha 1y ago
        Yes but it's natural considering that their security model is built on SIP being enabled