Contribute
Register

Explaining OS X El Capitan Security Changes - Workarounds and Current Information

So every time we have to update, do we need to disable SIP or can we leave it on partially disabled and be ok? For example I just updated (love clover) and the only thing that isnt working is audio. Right now I have it set per the guide. So do I need to disable SIP fully to fix audio or can I leave it on partially disabled?
 
So every time we have to update, do we need to disable SIP or can we leave it on partially disabled and be ok? For example I just updated (love clover) and the only thing that isnt working is audio. Right now I have it set per the guide. So do I need to disable SIP fully to fix audio or can I leave it on partially disabled?

You can re-enable SIP, but you have to be careful. Any action that might cause kernel cache to be rebuilt, if done without SIP enabled, will cause kernel cache to be without unsigned kexts that might be sitting in /S/L/E or /L/E. Things that a hack needs to boot... (FakeSMC, etc.).

It is not clear to me all the conditions that may lead to a kernel cache rebuild...
 
Is there any reason why (other than not having a developer account with apple) you could not sign a kext yourself, and then turn SIP back on? e.g.
Code:
codesign -s "Developer ID Application: Mycompany" FakeSMC.kext

Obviously one would not want to distribute this (for fear of having your developer account revoked), but it seems like you could have the best of both worlds: SIP+hackintosh.
 
Is there any reason why (other than not having a developer account with apple) you could not sign a kext yourself, and then turn SIP back on? e.g.
Code:
codesign -s "Developer ID Application: Mycompany" FakeSMC.kext

Obviously one would not want to distribute this (for fear of having your developer account revoked), but it seems like you could have the best of both worlds: SIP+hackintosh.

It needs to be signed by a developer account with "kext signing" privs.

But yes, if you had the required kext signing privs attached to your developer account, you could sign your own kexts and never have to disable SIP.
 
Not quite on topic I know, but as we are discussing SIP in El Capitan:

Is there a way to edit SIP functionality on a legit Mac using Terminal commands for finer control, similar to what Clover offers?
Can I, on a real Mac, partially disable SIP like 0x02 or 0x03 does in Clover, without completely disabling it?

If Clover can do it, perhaps there are similar Terminal commands...

It is so third-party utilities can work with SIP enabled.

Thanks!
 
Is there a way to edit SIP functionality on a legit Mac using Terminal commands for finer control, similar to what Clover offers?
Thanks!

Yes, there is! You are looking for "csrutil" which you will find on 10.11 installations. You can run it to find available options. You can find a little more discussion in one of the current reviews of El Capitan, e.g. http://arstechnica.com/apple/2015/09/os-x-10-11-el-capitan-the-ars-technica-review/9/ (where p9 talks about SIP and csrutil).
 
Just curious about something that I am wondering about. Why has Apple released the last few version of OS X free to those of use who purchased an earlier version (I Cannot remember which one it was)? Don't get me wrong, I am grateful for what they are doing but I would also like to give what is due to them with these OS X releases.
 
Just curious about something that I am wondering about. Why has Apple released the last few version of OS X free to those of use who purchased an earlier version (I Cannot remember which one it was)? Don't get me wrong, I am grateful for what they are doing but I would also like to give what is due to them with these OS X releases.


Are you really asking for dues to a $20 OS that you purchased? $20!
 
How I can to check the current status of SIP whether enabled or disabled?


Check RT values. If its brand new, Its probably fully enabled (which would cause you to not boot). So if you're booting into OSX, its a good indication that it's either fully disabled or partiality disabled.
 
Back
Top