“System integrity protection (SIP) is a feature in macOS that prevents certain critical locations on your disk from being modified. it doesn’t matter if you have admin rights or not,” Fatima Wahab writes for AddictiveTips. “If you’re trying to access or change files in one of the restricted locations either via Finder or via Terminal commands, it will not work.”
“This is both a good thing, and a bad thing. It’s good if you’re running an app with the highest possible privileges and the app turns out to be malicious,” Wahab writes. “It’s a bad thing because at times, you need to modify the restricted folders and you’re unable to. If you’re running a command in Terminal and it keeps failing because of SIP, you can disable it.”
“SIP is an important feature and it’s there for your safety,” Wahab writes. “It is understandable that you might need to disable it for a short period of time however, you should enable it again as soon as you can. It is not a good idea to permanently disable system integrity protection.”
Read more in the full article here.
MacDailyNews Take: We’ll repeat: If you disable SIP, re-enable it ASAP. It is not a good idea to permanently disable system integrity protection.
Disabled SIP to allow me to run the apps I want (cdock, Finderpop etc) on my computer when I want.
Don’t you know that this is Apple?
It’s about the apps “most people” want that Apple also wants.
Such non-conformist thinking will not be tolerated.
If it’s so important, why didn’t Apple include it on the 2019 iMacs? Is it because of problems or complaints or for the same reason they didn’t update the Bluetooth to 5.0; whatever that is?!?!
What you are describing is not the same as SIP.
For example: If you want to change the computer’s firmware you need to disable SIP. I had to do that a while back to change the firmware on an old 2009 Mac Pro to make it think it was a 2010 Mac Pro so it would run the latest macOS, which was required by some other software I needed to run.
In this case I agree with MDN. If you ever disable SIP, re-enable it as soon as you are done doing the esoteric stuff you need to do! Never leave SIP disabled.
You’re talking about the T2 chip, not SIP.
SIP is simply an OS setting that prevents modifying system files that typically should not be modified.