[SOLVED]Can't disable SIP (El Capitan)

[shogun168]

So not sure what I'm missing here but I need to temporarily disable SIP so I can get cdock, totalfinder and xtrafinder working on El Capitan ... I've booted into my recovery drive with the bootflags in the screenshot attached (+ nv_disable=1 to get the screen to display at all), gone to utilities -> terminal, gotten the bash 3.2 and tried both:

csrutil enable --without debug
csrutil disable

Although everytime I reboot, it never saves the setting and keeps SIP turned on, I get the Totalcommander prompt on startup and "csrutil status" always reports that it's off either right after i've entered the previous commands or after a restart.

Is there something I'm missing? Something to do with that rootless flag perhaps?

 

[BreBo]

Can't disable SIP (El Capitan)

To disable or enable SIP add the settings to your config.plist.

Clover Configurator > Rt Variables > BooterConfig and CsrActiveConfig

Relevant user options for SIP are as follows:
csr-active-config 0x0 = SIP Enabled (Default)
csr-active-config 0x3 = SIP Partially Disabled (Loads unsigned kexts)
csr-active-config 0x67 = SIP Disabled completely

<key>RtVariables</key>
    <dict>
        <key>CsrActiveConfig</key>
        <string>0x3</string>
        <key>BooterConfig</key>
        <string>0x28</string>
    </dict>

 

[shogun168]

Can't disable SIP (El Capitan)

Ah awesome .. I'll give that a shot tonight.

 

[shogun168]

Can't disable SIP (El Capitan)

To disable or enable SIP add the settings to your config.plist.

Clover Configurator > Rt Variables > BooterConfig and CsrActiveConfig

Relevant user options for SIP are as follows:
csr-active-config 0x0 = SIP Enabled (Default)
csr-active-config 0x3 = SIP Partially Disabled (Loads unsigned kexts)
csr-active-config 0x67 = SIP Disabled completely

<key>RtVariables</key>
    <dict>
        <key>CsrActiveConfig</key>
        <string>0x3</string>
        <key>BooterConfig</key>
        <string>0x28</string>
    </dict>

That worked perfectly ... Thanks!

 

[sightlysuperior]

So I've got rootless=0 and csractiveconfig set to 0x67 for but xtrafinder is still telling me it's on. I can't seem to get it going. I bought a copy of bartender 2 and that's not functional either can't get past the continue and install helper permission granter.So do I turn off the rootless command and keep the csr config or yeah I'm just trying different combinations until I get a good result but if you've been through it and it's all good for you I'd like to know how.
Hope you get back to me and thanks. oh and is 0-x67 working for you?

 

[navaira]

Here I set it first to 0x67, then to 0x03 and XtraFinder keeps on telling me that SIP is enabled, but then proceeds to work. I would like to know what value to use in csr-active-config to mimic csrutil enable --without debug as it's the only option for my other Macs where XF does not have problems.

Bartender 2 works with both settings. I'm afraid I can't be of help here.

 

[chill2x]

why i am having a kernel panic when i put this code on clover?

 

[Shinji89]

With csr-active-config 0x67 the commnand csrutil status autput:
System Integrity Protection status: disabled.

But Xtrafinder keeps saying that is enabled, and crash.

 

[Big]

With csr-active-config 0x67 the commnand csrutil status autput:
System Integrity Protection status: disabled.

But Xtrafinder keeps saying that is enabled, and crash.

Setting it to 0x14 takes care of the message by Xtrafinder.

 

[sightlysuperior]

Setting it to 0x14 takes care of the message by Xtrafinder.

So I used this tip. only trouble is now SIP reports as on. Like you said Xtrafinder works and does not complain but SIP is on according to system profiler and it may be impeding my Clover based AppleHDA patching as that isn't working either. could just be a boot issue and I shall reboot to see if AppleHDA patches are indeed this commands fault but that's my preliminary diagnosis