OCLP doesn't control SIP. OCLP surveys your machine and creates a config.plist that controls what OpenCore does when it boots your Mac. OCLP also will patch the OS if necessary to get it to work on unsupported hardware. Generally this patching then comes with a requirements to modify SIP to "lower" security so that the OS will boot and run with the patched components.Is it possible to tell OCLP, I mean to OpenCore to not control the SIP? I want to use official SIP control, when I need it I want to disable or enable from Recovery.
Depending on what your system needs you may be able to leave SIP fully on and control it through recovery mode. You can do this with a cMP5,1 and Monterey for example.
So, can you control it yourself? It depends.
Regards,
sfalatko
Last edited: