Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
System Integrity Protection Inexplicably Disabled by Default on Some New MacBook Pro Models
- Thread starter MacRumors
- Start date
- Sort by reaction score
Yup...mine disabled.
On a side note, my delivery dates went all over the place. Started with Friday, then updated to Thursday, then to Monday, then back to Friday, and delivered....Thursday! Fortunately, I had the pre-sign done for UPS and hanging on my front door, so my BTO 15 was waiting for me on my doorstep on Thursday when I got home!
I am LOVING the keyboard on this machine, as well as the touch bar. Awesome...and fast!
On a side note, my delivery dates went all over the place. Started with Friday, then updated to Thursday, then to Monday, then back to Friday, and delivered....Thursday! Fortunately, I had the pre-sign done for UPS and hanging on my front door, so my BTO 15 was waiting for me on my doorstep on Thursday when I got home!
I am LOVING the keyboard on this machine, as well as the touch bar. Awesome...and fast!
This is a bug in the OS installer, not just a factory setup issue. I just checked and SIP is disabled on my new 15" MacBook Pro. But, I screwed up when first setting it up so I wiped the drive and re-installed the OS from the recovery image. No wonder I've had no problem installing all my software!
[doublepost=1479823880][/doublepost]SIP was disabled on my 15" MacBook Pro as well. Thanks to finding this story before I picked up my new MacBook, I was prepared.
Since OS X El Capitan, the operating system that runs on Macs has been protected by a feature called System Integrity Protection (SIP), which is designed to keep your Mac safe from malware by restricting the permissions of the root user account and preventing unauthorized access to protected files and folders.
System Integrity Protection runs behind the scenes and is generally enabled by default in Macs running OS X El Capitan or later, but it seems the feature is inexplicably turned off on some new MacBook Pro models, leaving them vulnerable.
Developer Jonathan Wight noticed System Integrity Protection was disabled on some machines and tweeted about it this morning, prompting developer Steven Troughton-Smith to do an informal Twitter survey asking users about the status of their new machines.
System Integrity Protection is indeed disabled out of the box on a number of 13 and 15-inch MacBook Pro models, including one machine owned by MacRumors. Not all MacBook Pro models are affected, however, as there are users who are reporting that System Integrity Protection is turned on as expected.
As outlined in Apple's developer documentation, users can check whether SIP is turned on by entering the "csrutil status" command in Terminal. Enabling SIP requires booting into Recovery mode, turning it on using Terminal, and rebooting.
Apple is aware of the issue and will undoubtedly deliver a fix for the issue in an update, but timing for a release is unknown.
Article Link: System Integrity Protection Inexplicably Disabled by Default on Some New MacBook Pro Models
Phil Schiller recently explained that the new MacBooks would have needed to be 1mm thicker to allow startup chimes and SIP to be enabled.
Same for me. I am wondering if it makes more sense to perform a manual fresh installation?
What are you doing? Keep the default installed and just enable SIP or do a fresh install?
What are you doing? Keep the default installed and just enable SIP or do a fresh install?
Just turn it on manually. A fresh install is not going to enable SIP anyway and would be a complete waste of time.
Yeah... by default it is off. Good idea to turn it on though.Thanks & done
BTW: My firewall was also turned off - is that normal as well?
Ah, the do-it-yourselfer.
There is just absolutely no reason not to have SIP enabled or be running the latest OS. Maybe a point of pride for you, but really whatever the perceived advantage is negated by the reality of running the actual OS.
I've used 10.9-10.12 on my MacBook. I can't stand the new UI, prefer Lucida Grande, and am not much concerned about the exploits that have been patched. There's really only a couple of new features I want, but neither justify the other changes.
Yes. Stuff like this is inexcusable, no matter how trivial some people think it is.