For certain development tasks, I need to disable System Integrity Protection (SIP) (csrutil disable). After I am done doing my tests, I reenable SIP.
Additionally, SIP has a number of unsupported configurations. For example, csrutil enable --without debug enables all system integrity protections except debugging.
My question concerns the com.apple.rootless.install.heritable entitltement, which, from my understanding, allows any app to gain root access without authorization of the user. I would like to know whether any app give itself this entitlement without my authorization when (1) SIP is fully disabled (csrutil disable) and when (2) SIP is partially disabled in the aforementioned specific unsupported configuration (csrutil enable --without debug).