The key is not just to install .156 with SIP enabled, I also tried this before, without uninstalling existing driver, and it didn't work.
The key is:
1) To uninstall existing driver completely. To be sure to not leave anything, first uninstall using the official uninstaller, than check that there is no Nvda*, GeForce* files in /Library/Extensions, and no GeForce*Web* files in /System/Library/Extensions:
A little commands listing to ensure all is removed correctly (do not type the leading $, it's just to indicate the start of command prompt):
Code:
$ cd /Library/Extensions
$ sudo rm -rf GeForce*
$ sudo rm -rf NVDA*
$ sudo touch .
$ cd /System/Library/Extensions
$ sudo rm -rf GeForce*Web*
$ sudo touch .
2) Reboot unchecking NVidiaWeb option (just in case) in Clover and setting CsrActiveConfig to 0x0. You should boot in VESA unaccelerated mode.
After boot check in Terminal that SIP in indeed enabled (do not type the leading $, it's just to indicate the start of command prompt):
Code:
$ csrutil status
System Integrity Protection status: enabled.
If it returns enabled without any other warning, then it's OK.
3) Install new .156 Web driver normally with the official unmodified NVidia installer.
4) Don't click "Restart" at the end, keep the installer window open and go to "System Preferences -> Security and Privacy" settings pane.
Wait approximatively 30 secs and check that there is no approval request for NVidia Corp kernel extensions. If it's the case, approve it.
5) Reboot.
6) On Clover options, keep SIP enabled for first boot (so CsrActiveConfig set to 0x0) and make sure NVidiaWeb option is checked.
7) Verify that the driver is working completely with full acceleration and no lags.
At this point, you can disable SIP again if you want (even though it should not be necessary, all hackintosh necessary kexts (even for audio, for example with VoodooHDA or similar kext) and patches can be managed by Clover directly and Clover kext injection and patch mechanisms are SIP compatible).