Contribute
Register

[SOLVED]Can't disable SIP (El Capitan)

Status
Not open for further replies.
Joined
Mar 7, 2015
Messages
28
Motherboard
ASUS Maximus VII Hero
CPU
Intel Core i7-4770k
Graphics
Nvidia GTX 980 (x2)
Mac
  1. MacBook Pro
Classic Mac
Mobile Phone
  1. Android
So not sure what I'm missing here but I need to temporarily disable SIP so I can get cdock, totalfinder and xtrafinder working on El Capitan ... I've booted into my recovery drive with the bootflags in the screenshot attached (+ nv_disable=1 to get the screen to display at all), gone to utilities -> terminal, gotten the bash 3.2 and tried both:

csrutil enable --without debug
csrutil disable

Although everytime I reboot, it never saves the setting and keeps SIP turned on, I get the Totalcommander prompt on startup and "csrutil status" always reports that it's off either right after i've entered the previous commands or after a restart.

Is there something I'm missing? Something to do with that rootless flag perhaps?
 

Attachments

  • Screen Shot 2015-10-20 at 1.11.10 a.m..png
    Screen Shot 2015-10-20 at 1.11.10 a.m..png
    161.9 KB · Views: 12,252

BreBo

Moderator
Joined
Oct 17, 2011
Messages
9,449
Motherboard
Gigabyte GA-Z87X-OC
CPU
i7-4770K
Graphics
HD 4600 / RX 580
Can't disable SIP (El Capitan)

To disable or enable SIP add the settings to your config.plist.

Clover Configurator > Rt Variables > BooterConfig and CsrActiveConfig

Relevant user options for SIP are as follows:
csr-active-config 0x0 = SIP Enabled (Default)
csr-active-config 0x3 = SIP Partially Disabled (Loads unsigned kexts)
csr-active-config 0x67 = SIP Disabled completely

Code:
<key>RtVariables</key>
    <dict>
        <key>CsrActiveConfig</key>
        <string>0x3</string>
        <key>BooterConfig</key>
        <string>0x28</string>
    </dict>
 
Joined
Mar 7, 2015
Messages
28
Motherboard
ASUS Maximus VII Hero
CPU
Intel Core i7-4770k
Graphics
Nvidia GTX 980 (x2)
Mac
  1. MacBook Pro
Classic Mac
Mobile Phone
  1. Android
Can't disable SIP (El Capitan)

To disable or enable SIP add the settings to your config.plist.

Clover Configurator > Rt Variables > BooterConfig and CsrActiveConfig

Relevant user options for SIP are as follows:
csr-active-config 0x0 = SIP Enabled (Default)
csr-active-config 0x3 = SIP Partially Disabled (Loads unsigned kexts)
csr-active-config 0x67 = SIP Disabled completely

Code:
<key>RtVariables</key>
    <dict>
        <key>CsrActiveConfig</key>
        <string>0x3</string>
        <key>BooterConfig</key>
        <string>0x28</string>
    </dict>

That worked perfectly ... Thanks!
 
Joined
Jul 12, 2015
Messages
31
Motherboard
MSI Z270 Tomahawk Arctic
CPU
i7-7700K
Graphics
RX Vega 56, HD 630
Mac
  1. iMac
  2. MacBook
  3. MacBook Air
  4. MacBook Pro
Classic Mac
  1. iMac
  2. Power Mac
  3. PowerBook
Mobile Phone
  1. Android
  2. iOS
So I've got rootless=0 and csractiveconfig set to 0x67 for but xtrafinder is still telling me it's on. I can't seem to get it going. I bought a copy of bartender 2 and that's not functional either can't get past the continue and install helper permission granter.So do I turn off the rootless command and keep the csr config or yeah I'm just trying different combinations until I get a good result but if you've been through it and it's all good for you I'd like to know how.
Hope you get back to me and thanks. oh and is 0-x67 working for you?
 
Joined
Oct 31, 2014
Messages
135
Motherboard
Lenovo LNVNB161216
CPU
i7-8550U
Graphics
UHD 620 (3840x2160)
Mobile Phone
  1. Android
Here I set it first to 0x67, then to 0x03 and XtraFinder keeps on telling me that SIP is enabled, but then proceeds to work. I would like to know what value to use in csr-active-config to mimic csrutil enable --without debug as it's the only option for my other Macs where XF does not have problems.

Bartender 2 works with both settings. I'm afraid I can't be of help here.
 
Joined
Dec 30, 2015
Messages
144
Motherboard
Intel Lynx Point-LP
CPU
intel i5 4200U
Graphics
intel HD4400 Haswell Mobile 1366x768
Mac
  1. MacBook Pro
Mobile Phone
  1. Android
  2. iOS
why i am having a kernel panic when i put this code on clover?
 
Joined
Jan 25, 2016
Messages
78
Motherboard
p151emx (chipset HM77)
CPU
i7-3720QM
Graphics
GeForce GTX 670M (1536 MB) + HD4000 (1980x1080)
Mac
Classic Mac
Mobile Phone
With csr-active-config 0x67 the commnand csrutil status autput:
System Integrity Protection status: disabled.

But Xtrafinder keeps saying that is enabled, and crash.
 

Big

Joined
Jan 11, 2013
Messages
156
Motherboard
Gigabyte GA-Z170X-Gaming 3
CPU
i5-6400
Graphics
GTX 750
Mobile Phone
  1. iOS
With csr-active-config 0x67 the commnand csrutil status autput:
System Integrity Protection status: disabled.

But Xtrafinder keeps saying that is enabled, and crash.

Setting it to 0x14 takes care of the message by Xtrafinder.
 
Joined
Jul 12, 2015
Messages
31
Motherboard
MSI Z270 Tomahawk Arctic
CPU
i7-7700K
Graphics
RX Vega 56, HD 630
Mac
  1. iMac
  2. MacBook
  3. MacBook Air
  4. MacBook Pro
Classic Mac
  1. iMac
  2. Power Mac
  3. PowerBook
Mobile Phone
  1. Android
  2. iOS
Setting it to 0x14 takes care of the message by Xtrafinder.


So I used this tip. only trouble is now SIP reports as on. Like you said Xtrafinder works and does not complain but SIP is on according to system profiler and it may be impeding my Clover based AppleHDA patching as that isn't working either. could just be a boot issue and I shall reboot to see if AppleHDA patches are indeed this commands fault but that's my preliminary diagnosis
 
Last edited:
Status
Not open for further replies.
Top