Disable System Integrity Protection (SIP) / Rootless In OS X El Capitan – How To


Here's a complete step by step guide on how you can disable System Integrity Protection / Rootless feature in OS X El Capitan.

Mac Security

OS X El Capitan, on the face of it, looks like a small upgrade. But if you lift the hood and see what Apple has packed underneath, then you'll be surprised to learn that El Capitan is indeed a massive release. From power-user features to security enhancements, Cupertino's latest and greatest desktop OS goes above and beyond what a piece of software should be like.

In all those changes which ship with OS X El Capitan, Apple has thrown in a new System Integrity Protection feature, otherwise known as 'Rootless,' that protects your Mac from falling prey to malicious or unwanted code. This malicious code, which can run on its own, or by a user's intervention, fails to go through to the OS X root files all thanks to this newfound feature. But at times, there is some code or changes you'd want to install / make in order to get things going, in that case the Rootless feature can be a huge roadblock. If you're looking to disable the Rootless feature off, then here's what you need to do.

Disable System Integrity Protection (SIP) / Rootless In OS X El Capitan

Read the steps below carefully before actually performing them since you're making a very, very key change to how your Mac functions.

1. Restart your Mac and press the 'Command + R' key combinations as soon as you hear the startup chime. This will boot your Mac into Recovery Mode.

2. Now over here, you'll be presented with a bunch of different options. At the top you should see the Menu bar, click on 'Utilities.'

3. Now click on 'Terminal.'

4. Type in the following command to disable SIP:

csrutil disable

5. Restart your Mac in order to bring the new change into effect.

Looking to enable Rootless / SIP back again? Simply follow the above steps again as they are, and instead of typing 'csrutil disable' in Terminal, type in the following:

csrutil enable

If you're unsure whether or not Rootless / SIP is disabled or enabled on your Mac, then simply launch Terminal, and type in the following command:

csrutil status

Either you'll get an 'enabled' or 'disabled' message. Depending on what you see, you can take action accordingly. And given that it's a security feature of OS X, we highly recommend that you keep Rootless / SIP turned on at all times.