- Security
- Disabling and Enabling System Integrity Protection
Article
Disable system protections only temporarily during development to test drivers, kernel extensions, and other low-level code.
Overview
System Integrity Protection (SIP) in macOS protects the entire system by preventing the execution of unauthorized code. The system automatically authorizes apps that the user downloads from the App Store. The system also authorizes apps that a developer notarizes and distributes directly to users. The system prevents the launching of all other apps by default.
During development, it may be necessary for you to disable SIP temporarily to install and test your code. You donât need to disable SIP to run and debug apps from Xcode, but you might need to disable it to install system extensions, such as DriverKit drivers.
Disable System Integrity Protection Temporarily
To disable SIP, do the following:
- Restart your computer in Recovery mode.
- Launch Terminal from the Utilities menu.
- Run the command
csrutil disable
. - Restart your computer.
Enable System Integrity Protection
To reenable SIP, do the following:
- Restart your computer in Recovery mode.
- Launch Terminal from the Utilities menu.
- Run the command
csrutil enable
. - Restart your computer.
Current page is Disabling and Enabling System Integrity Protection