Modifying SIP Settings on OCLP Sonoma

SIP is a macOS security feature that restricts what certain processes can do, and it can be tricky to modify. Here's a guide on how to adjust the SIP settings:

Audience: Intermediate to Expert

1. Restart in Recovery Mode:
   - Restart your MacMini and immediately hold down the `Command (⌘)` and `R` keys.
   - Release these keys when you see the Apple logo or a spinning globe.

2. Open Terminal in Recovery Mode:
   - In the Utilities menu, select `Terminal`.

3. Disable SIP:
   - In the Terminal, type `csrutil disable` and press `Enter`.
   - This command will disable SIP completely. 

4. Enable Specific SIP Protections:
   - Reboot your MacMini normally.
   - Open the Terminal in your standard user environment.
   - To enable specific protections while allowing `task_for_pid`, enter the following command:
     ```
     sudo csrutil enable --without debug --without dtrace --without nvram --without task_for_pid
     ```
   - Replace the options after `--without` based on the protections you want to disable. In your case, keep `--without task_for_pid`.

5. Rebuild & Reboot:
   - Follow the instructions for rebuilding any necessary software or services, such as the BlueBubbles private API.
   - Once complete, reboot your MacMini.

6. Verify SIP Settings:
   - After rebooting, open Terminal.
   - Enter `csrutil status` to check the current status of SIP.

Visual Aids: Include screenshots of the Terminal in Recovery Mode, demonstrating the command inputs.

Note: Modifying SIP settings can compromise the security of your system. Proceed with caution and understand the risks involved. 


Heya, I'm running OCLP Sonoma on a 2010 MacMini and all seems to be well. I've moved the booter over to the computer's hard drive and that's fine too.

I'm trying to tick the box of ALLOW_TASK_FOR_PID under the SIP settings in order to run the BlueBubbles private API. Per their instruction, it says to check the appropriate boxes in SIP (all but the one I mentioned already are) then "Once complete, build OpenCore again and reboot." But I've attempted this like 4 or 5 times and can't seem to get the setting to "stick." Any advice?

Thanks!

submitted by /u/bragging_party
[link] [comments]