There is a debate about whether bits 0x10 and 0x800 in csr-active-config prevent macOS updates.
Some people and webpages who really should know (e.g.
https://osxlatitude.com/forums/topic/11553-how-do-i-disable-sip-system-integrity-protection/ ) are stating that 0x10 prevents updates period, and that 0x800 prevents incremental (but not full) OTA updates.
But other people are reporting that they've got those bits set, and that they're getting updates fine anyway!
If anybody is using SIP disabled most of the time, but is getting OTA updates (and especially incremental OTA updates) I'd be very interested to know your csr-active-config value (as reported by
nvram csr-active-config
).
I don't want to spam the whole list, so perhaps PM me.
Many thanks in advance for any replies!