FazBrowse Wikipedia Viewer | Main Page |
Search Wikipedia:
|
Viewing: https://en.wikipedia.org/wiki/System_Integrity_Protection

System Integrity Protection

System Integrity Protection
Security layers present in macOS
DeveloperApple Inc.
ReleaseSeptember 16, 2015;11 years ago (2015-09-16)
Operating systemmacOS
Included withOS X El Capitan (OS X 10.11) and later
TypeComputer security software
Websitedeveloper.apple.com/library/archive/documentation/Security/Conceptual/System_Integrity_Protection_Guide/Introduction/Introduction.html

System Integrity Protection (SIP, sometimes referred to as rootless) is a security feature of Apple's macOS operating system introduced in OS X El Capitan (2015) (OS X 10.11). It comprises a number of mechanisms that are enforced by the kernel. A centerpiece of SIP is the protection of system-owned files and directories against modifications by processes without a specific "entitlement", even when executed by the root user or a user with root privileges (sudo).

Apple says that the root user can be a significant risk to the system's security, especially on a system with a single user account on which that user is also the administrator. SIP is enabled by default but can be disabled.

 –the security of the entire system is potentially compromised. Restricting the power of root is not unprecedented on macOS. For instance, versions of macOS prior to Mac OS X Leopard enforce /System, /usr (but not /tmp and /private/tmp and DYLD_LIBRARY_PATH before calling a system program like Slivka, Eric (June 12, 2015). "OS X El Capitan Opens Door to TRIM Support on Third-Party SSDs for Improved Performance". MacRumors. Retrieved June 18, 2015.
  • 1 2 3 4 5 Garfinkel, Simon; Spafford, Gene; Schwartz, Alan (2003). Practical UNIX and Internet Security. O'Reilly Media. pp. 118–9. ISBN 9780596003234.
  • ↑ "What's New In OS X - OS X El Capitan v10.11". Mac Developer Library. Apple. Archived from the original on March 4, 2016. Retrieved September 30, 2016. Code injection and runtime attachments to system binaries are no longer permitted.
  • ↑ Walton, Jeffrey (March 28, 2020). "Nettle 3.5.1 and OS X 10.12 patch". nettle-bugs (Mailing list). Archived from the original on July 14, 2020. Retrieved 13 July 2020.
  • 1 2 "},"publisher":{"wt":"[[OS X Daily]]"},"date":{"wt":"August 1, 2018"},"access-date":{"wt":"March 6, 2021"}},"i":0}}]}'/>"How to Check if System Integrity Protection (SIP) is Enabled on Mac". OS X Daily. August 1, 2018. Retrieved March 6, 2021.
  • ↑ System Integrity Protection Guide in Apple's Mac Developer Library
    • macOS
    Versions
    Mac OS X
    OS X
    macOS
    Predecessors
    Applications
    Core
    applications
    Developer
    Tools
    Xcode
    Former
    Utilities
    Former
    Technologies,
    user interface
    Deprecated
    Discontinued
    View original on Wikipedia | Back | FazBrowse Home