Is it OK to disable OSX's System Integrity Protection??
Moderator: James Steele
- FMiguelez
- Posts: 8266
- Joined: Sun Oct 24, 2004 10:01 pm
- Primary DAW OS: MacOS
- Location: Body: Narco-México Soul/Heart: NYC
Is it OK to disable OSX's System Integrity Protection??
Hello.
I am annoyed that I haven't been able to use X-Finder in my office computer because System Integrity Protection prevents it from working.
Is it safe to disable it? I don't want to open backdoors that I don't know of...
If it's not a big deal, I would gladly give up whatever "security" this gives for the convenience of being able to use X-Finder.
So IS it a big deal?
Apple doesn't make it clear if it's an all-or-nothing thing. Could I just authorize the app and leave the System Integrity on?
Thanks!
I am annoyed that I haven't been able to use X-Finder in my office computer because System Integrity Protection prevents it from working.
Is it safe to disable it? I don't want to open backdoors that I don't know of...
If it's not a big deal, I would gladly give up whatever "security" this gives for the convenience of being able to use X-Finder.
So IS it a big deal?
Apple doesn't make it clear if it's an all-or-nothing thing. Could I just authorize the app and leave the System Integrity on?
Thanks!
Mac Mini Server i7 2.66 GHs/16 GB RAM / OSX 10.14 / DP 9.52
Tascam DM-24, MOTU Track 16, all Spectrasonics' stuff,
Vienna Instruments SUPER PACKAGE, Waves Mercury, slaved iMac and Mac Minis running VEP 7, etc.
---------------------------
"In physics the truth is rarely perfectly clear, and that is certainly universally the case in human affairs. Hence, what is not surrounded by uncertainty cannot be the truth." ― Richard Feynman
Tascam DM-24, MOTU Track 16, all Spectrasonics' stuff,
Vienna Instruments SUPER PACKAGE, Waves Mercury, slaved iMac and Mac Minis running VEP 7, etc.
---------------------------
"In physics the truth is rarely perfectly clear, and that is certainly universally the case in human affairs. Hence, what is not surrounded by uncertainty cannot be the truth." ― Richard Feynman
- mikehalloran
- Posts: 15219
- Joined: Sun Jan 25, 2009 5:08 pm
- Primary DAW OS: MacOS
- Location: Sillie Con Valley
Re: Is it OK to disable OSX's System Integrity Protection??
SIP provides security at the root level. If something gets in that can wreak havoc because it was off, that's bad. So far, there's not much going around that is causing trouble — yet.
Another issue is that system conflicts can occur. Apple told developers that, beginning with Lion, they were going to sandbox the Root so stop writing to it and many ignored this directive, especially the cheap and freeware guys. With El Cap, they made good on that—incompatible .kxt files and other problems still installed at that level cannot be accessed by applications with SIP engaged.
In a few cases (Adobe comes to mind), the installers won't work with SIP enabled but the applications do. I still prefer Photoshop Elements 6 for certain document tasks even though I have 15.
I don't know X-Finder and have no idea what it does. A Google search reveals many apps with similar names — no idea if they may do what you need.
There's even a version of Soundflower that works in Sierra nowadays. I had to disable SIP to dig the old build out of the root but it works. Actually, I had to disable SIP to clean a few old apps from my system. I keep it enabled now.
Another issue is that system conflicts can occur. Apple told developers that, beginning with Lion, they were going to sandbox the Root so stop writing to it and many ignored this directive, especially the cheap and freeware guys. With El Cap, they made good on that—incompatible .kxt files and other problems still installed at that level cannot be accessed by applications with SIP engaged.
In a few cases (Adobe comes to mind), the installers won't work with SIP enabled but the applications do. I still prefer Photoshop Elements 6 for certain document tasks even though I have 15.
I don't know X-Finder and have no idea what it does. A Google search reveals many apps with similar names — no idea if they may do what you need.
There's even a version of Soundflower that works in Sierra nowadays. I had to disable SIP to dig the old build out of the root but it works. Actually, I had to disable SIP to clean a few old apps from my system. I keep it enabled now.
DP 11.31; 828mkII FW, micro lite, M4, MTP/AV USB Firmware 2.0.1
2023 Mac Studio M2 8TB, 192GB RAM, OS Sonoma 14.4.1, USB4 8TB external, M-Audio AIR 192|14, Mackie ProFxv3 6/10/12; 2012 MBPs Catalina, Mojave
IK-NI-Izotope-PSP-Garritan-Antares, LogicPro X, Finale 27.4, Dorico 5.2, Notion 6, Overture 5, TwistedWave, DSP-Q 5, SmartScore64 Pro, Toast 20 Pro
2023 Mac Studio M2 8TB, 192GB RAM, OS Sonoma 14.4.1, USB4 8TB external, M-Audio AIR 192|14, Mackie ProFxv3 6/10/12; 2012 MBPs Catalina, Mojave
IK-NI-Izotope-PSP-Garritan-Antares, LogicPro X, Finale 27.4, Dorico 5.2, Notion 6, Overture 5, TwistedWave, DSP-Q 5, SmartScore64 Pro, Toast 20 Pro
- FMiguelez
- Posts: 8266
- Joined: Sun Oct 24, 2004 10:01 pm
- Primary DAW OS: MacOS
- Location: Body: Narco-México Soul/Heart: NYC
Re: Is it OK to disable OSX's System Integrity Protection??
Thank you for that info, Mike.mikehalloran wrote: I don't know X-Finder and have no idea what it does. A Google search reveals many apps with similar names — no idea if they may do what you need.
X-Finder is a little app that gives the Finder additional functionality, i.e, to automatically widen the columns to see full names, to keep the old tags where you see the name of the file coloured (instead of a sad little dot next to it as it happens now, etc.).
So is SIP something you can tell yourself to "authorise" certain apps?mikehalloran wrote:I had to disable SIP to dig the old build out of the root but it works. Actually, I had to disable SIP to clean a few old apps from my system. I keep it enabled now.
Suppose I turn off SIP to give access to X-Finder. Will it stop working the moment I turn on SIP again?
IOW, is it like a firewall that you can manually give access to certain things, or is it all-or-nothing?
Mac Mini Server i7 2.66 GHs/16 GB RAM / OSX 10.14 / DP 9.52
Tascam DM-24, MOTU Track 16, all Spectrasonics' stuff,
Vienna Instruments SUPER PACKAGE, Waves Mercury, slaved iMac and Mac Minis running VEP 7, etc.
---------------------------
"In physics the truth is rarely perfectly clear, and that is certainly universally the case in human affairs. Hence, what is not surrounded by uncertainty cannot be the truth." ― Richard Feynman
Tascam DM-24, MOTU Track 16, all Spectrasonics' stuff,
Vienna Instruments SUPER PACKAGE, Waves Mercury, slaved iMac and Mac Minis running VEP 7, etc.
---------------------------
"In physics the truth is rarely perfectly clear, and that is certainly universally the case in human affairs. Hence, what is not surrounded by uncertainty cannot be the truth." ― Richard Feynman
- HCMarkus
- Posts: 9746
- Joined: Tue Jan 10, 2006 9:01 am
- Primary DAW OS: MacOS
- Location: Rancho Bohemia, California
- Contact:
Re: Is it OK to disable OSX's System Integrity Protection??
Not sure about XFinder, but some apps require turning SIP off when installing, then work fine when SIP is re-enabled post-install. SwitchResX is one such app and the latest I had to deal with that required such steps. It's the reason I am enjoying 60Hz on my 4k (HDMI TV) main studio monitor.
- mikehalloran
- Posts: 15219
- Joined: Sun Jan 25, 2009 5:08 pm
- Primary DAW OS: MacOS
- Location: Sillie Con Valley
Re: Is it OK to disable OSX's System Integrity Protection??
All or nothing.IOW, is it like a firewall that you can manually give access to certain things, or is it all-or-nothing?
Probably. Many such apps will work if you know where to put the .kxt files. To do that, you have to disable SIP, move the files from the Root, then reenable it again.Suppose I turn off SIP to give access to X-Finder. Will it stop working the moment I turn on SIP again?
No. It prevents apps (and you) from accessing the Root.So is SIP something you can tell yourself to "authorise" certain apps?
As I mentioned earlier, some Adobe apps will work if you do that. It's certainly worth a try.Not sure about XFinder, but some apps require turning SIP off when installing, then work fine when SIP is re-enabled post-install. SwitchResX is one such app and the latest I had to deal with that required such steps. It's the reason I am enjoying 60Hz on my 4k (HDMI TV) main studio monitor.
DP 11.31; 828mkII FW, micro lite, M4, MTP/AV USB Firmware 2.0.1
2023 Mac Studio M2 8TB, 192GB RAM, OS Sonoma 14.4.1, USB4 8TB external, M-Audio AIR 192|14, Mackie ProFxv3 6/10/12; 2012 MBPs Catalina, Mojave
IK-NI-Izotope-PSP-Garritan-Antares, LogicPro X, Finale 27.4, Dorico 5.2, Notion 6, Overture 5, TwistedWave, DSP-Q 5, SmartScore64 Pro, Toast 20 Pro
2023 Mac Studio M2 8TB, 192GB RAM, OS Sonoma 14.4.1, USB4 8TB external, M-Audio AIR 192|14, Mackie ProFxv3 6/10/12; 2012 MBPs Catalina, Mojave
IK-NI-Izotope-PSP-Garritan-Antares, LogicPro X, Finale 27.4, Dorico 5.2, Notion 6, Overture 5, TwistedWave, DSP-Q 5, SmartScore64 Pro, Toast 20 Pro
- mikehalloran
- Posts: 15219
- Joined: Sun Jan 25, 2009 5:08 pm
- Primary DAW OS: MacOS
- Location: Sillie Con Valley
Re: Is it OK to disable OSX's System Integrity Protection??
Here's that old thread about SIP and Soundflower. If you know the names of the root files for X-Finder, it might help you figure it out.
viewtopic.php?f=26&t=61722&p=525313&hil ... er#p525313
viewtopic.php?f=26&t=61722&p=525313&hil ... er#p525313
DP 11.31; 828mkII FW, micro lite, M4, MTP/AV USB Firmware 2.0.1
2023 Mac Studio M2 8TB, 192GB RAM, OS Sonoma 14.4.1, USB4 8TB external, M-Audio AIR 192|14, Mackie ProFxv3 6/10/12; 2012 MBPs Catalina, Mojave
IK-NI-Izotope-PSP-Garritan-Antares, LogicPro X, Finale 27.4, Dorico 5.2, Notion 6, Overture 5, TwistedWave, DSP-Q 5, SmartScore64 Pro, Toast 20 Pro
2023 Mac Studio M2 8TB, 192GB RAM, OS Sonoma 14.4.1, USB4 8TB external, M-Audio AIR 192|14, Mackie ProFxv3 6/10/12; 2012 MBPs Catalina, Mojave
IK-NI-Izotope-PSP-Garritan-Antares, LogicPro X, Finale 27.4, Dorico 5.2, Notion 6, Overture 5, TwistedWave, DSP-Q 5, SmartScore64 Pro, Toast 20 Pro
- MIDI Life Crisis
- Posts: 26254
- Joined: Wed May 18, 2005 10:01 pm
- Primary DAW OS: MacOS
- Contact:
Re: Is it OK to disable OSX's System Integrity Protection??
Can't you turn it off to install and then turn it back on?
- ghobish
- Posts: 630
- Joined: Thu Oct 21, 2004 10:01 pm
- Primary DAW OS: MacOS
- Location: San Francisco
- Contact:
Re: Is it OK to disable OSX's System Integrity Protection??
Sadly x-finder will not operate with SIP enabled. I miss it.FMiguelez wrote:Thank you for that info, Mike.mikehalloran wrote: I don't know X-Finder and have no idea what it does. A Google search reveals many apps with similar names — no idea if they may do what you need.
X-Finder is a little app that gives the Finder additional functionality, i.e, to automatically widen the columns to see full names, to keep the old tags where you see the name of the file coloured (instead of a sad little dot next to it as it happens now, etc.).
So is SIP something you can tell yourself to "authorise" certain apps?mikehalloran wrote:I had to disable SIP to dig the old build out of the root but it works. Actually, I had to disable SIP to clean a few old apps from my system. I keep it enabled now.
Suppose I turn off SIP to give access to X-Finder. Will it stop working the moment I turn on SIP again?
IOW, is it like a firewall that you can manually give access to certain things, or is it all-or-nothing?
Sent from my iPad using Tapatalk
Gary Hobish
A. Hammer Mastering & Digital Media
San Francisco, Ca
http://ahammer.com/mastering
Mastering: Mac Studio M1 MAX 2TB SSD, 64GB RAM, 32-core GPU, OS 12.6; DP 11.22, Waves, Izotope RX10 Advanced, Alloy, Nectar, PSP stuff, Plug-In Alliance, Metric Halo ULN-8 MkIV, Euphonix MC Control & MC Mix, Presonus Central Station, and (still) no air conditioning (but at least now there is airflow)
Annex: Mac Pro 2010 5,1 3.33GHz 12-core, 80GB RAM, 10.14.6, DP 11.22, Metric Halo ULN8 MkIV, MOTU 2408III
A. Hammer Mastering & Digital Media
San Francisco, Ca
http://ahammer.com/mastering
Mastering: Mac Studio M1 MAX 2TB SSD, 64GB RAM, 32-core GPU, OS 12.6; DP 11.22, Waves, Izotope RX10 Advanced, Alloy, Nectar, PSP stuff, Plug-In Alliance, Metric Halo ULN-8 MkIV, Euphonix MC Control & MC Mix, Presonus Central Station, and (still) no air conditioning (but at least now there is airflow)
Annex: Mac Pro 2010 5,1 3.33GHz 12-core, 80GB RAM, 10.14.6, DP 11.22, Metric Halo ULN8 MkIV, MOTU 2408III