- Jul 24, 2015
- MSI H81i
- RX 580
Note that SIP has changed (several times) since El Capitan. The new Secure Kernel Extension Loading feature aka Gatekeeper prompt can be disabled in CSR flags, but 0x67, 0x03 and 0x00 will leave it enabled along with other protections, as you can see in the Clover screenshot and csrstat output.How could it be done?
csrstat v1.7 Copyright (c) 2015-2017 by Pike R. Alpha System Integrity Protection status: enabled (0x00000067) (Custom Configuration). Configuration: Apple Internal............: 0 (disabled) Kext Signing Restrictions.: 1 (disabled) Task for PID Restrictions.: 1 (disabled) Filesystem Protections....: 1 (disabled) Debugging Restrictions....: 0 (enabled) DTrace Restrictions.......: 1 (disabled) NVRAM Protections.........: 1 (disabled) Device Configuration......: 0 (enabled) BaseSystem Verification...: 0 (enabled) User Approved Kext Loading: 0 (enabled) This is an unsupported configuration, likely to break in the future and leave your machine in an unknown state.