Apple added SIP (System Integrity Protection) in OS X El Capitan. SIP is a blockade on editing the /System, /sbin, and /usr directories (with the exception of the /usr/local subdirectory).
System Integrity Protection is a security technology in OS X El Capitan that’s designed to help prevent potentially malicious software from modifying protected files and folders on your Mac.
In OS X, the “root” user account previously had no permission restrictions and could access any system folder or application on your Mac. Software gained root-level access when you entered your administrator name and password to install it and could then modify or overwrite any system file or application.
System Integrity Protection restricts the root account and limits the actions that the root user can perform on protected parts of OS X.
Disabling SIP
Step 1. Reboot your computer into Recovery Mode by holding down Command + R on startup
Step 2. Open Terminal from the Utilities menu
Step 3. Enter the following command:
csrutil disable
Step 4. Reboot your computer
It’s recommend to keep SIP enabled whenever possible!
Enabling SIP
Step 1. Reboot your computer into Recovery Mode by holding down Command + R on startup
Step 2. Open Terminal from the Utilities menu
Step 3. Enter the following command:
csrutil enable
Step 4. Reboot your computer
Marco Aurélio says
Both my 2 Mac Mini midi 2011 allows only a internet recover mode. After waiting the boot process (from internet) , opened the terminal window and there is no crsutil executable. So cannot disable SIP.
I tried to find the crsutil at all directories and could not find it.
How can I solve this?
John Sawyer says
This may sound silly, but first make sure your Macs are running El Capitan.
If they are (presumably), then your Macs’ startup drives may not have a Recovery HD partition. You can create one using the utility “Recovery Partition Creator”, available at http://musings.silvertooth.us/2014/07/recovery-partition-creator-3-8/
PETER FRITSCHE says
I have MacBookPro 13″ mid 2010.Did the same thing and it goes into internet recovery mode .Trying to install an app call reFind,is there any other to disable SIP.