rootless becomes mindless

Rootless just became worse. Do this:


xattr /System


you'll see an attribute com.apple.rootless being set.


Yes, you can't remove it.


And that means, for example, if you want to modify something inside, you can't. Like, repointing your JVM to some other?


Setting rootless via nvram does not help.


Booting from another partition helps.


Apple, please, could you just get out of my way when I want to do something on the device that I own? I know exactly what I'm doing. I don't want you to patronize me in getting in my way - like, forcing an ITunes library to be in one directory, etc. I'd like to have a switch that says "let me do it."


I know. That switch is called Linux. Which I happened to then resort to yesterday as some Java program I needed didn't come up on OSX.


There was this thinkgeek T-Shirt "Got root?"


I suggest to do one "Got root? No. Got Apple."

Boot into your Recovery HD, go to Utilities > Security Configuration and turn SIP off. Now, you can do what you want. If it is still not working, file a bug report.

nvram boot args were never supported for disabling this and it was removed in the latest betas.

Accepted Answer

The supported way to disable System Integrity Protection in those cases where it's truly necessary is to boot into the Recovery partition and turn System Integrity Protection off from there with the csrutil tool.


$ csrutil

usage: csrutil <command>

Modify the System Integrity Protection configuration. All configuration changes apply to the entire machine.

Available commands:

disable

Disable the protection on the machine. Requires a reboot.

enable

Enable the protection on the machine. Requires a reboot.

status

Display the current configuration.


The kext-dev-mode and rootless boot-args are being removed from OS X El Capitan and will no longer work.

--gc

i did disable it via recovery, but everytime i boot again to recovery, it shows as enable

rootless becomes mindless
 
 
Q