How to check if SIP is enabled on a Mac


System integrity protection (Integrity Protection (SIP)) protects certain important Mac OS system folders from modifications, extractions and deletions on the Mac, even if you have "root" access. The SIP system is enabled by default in all modern versions of Mac OS, but periodically it still does not hurt to check the status of SIP on your Mac.
There are two ways to check whether the system is active - through the command line and using the System Information tool.
Below we describe both ways to check the status of SIP on a Mac.

How to check the status  of System Integrity Protection  via Terminal

1. Start the Terminal program from the utility folder.
2. Type the following command and press return (enter):
csrutil status
3. You will see one of the following messages:
  • If the SIP system is active - System Integrity Protection status: enabled.
  • If the SIP system is disabled - System Integrity Protection status: disabled.
Snimok-ekrana-2018-08-03-v-11.17.02

If the SIP system is active, then you do not need to do anything. If it is disabled, it should be turned on.

How to check the System Integrity Protection ( SIP) status in System Information

  1. Open the folder with the utilities.
  2. Run the System Information.
  3. Select Software from the list on the left.
  4. Locate the System Integrity Protection item in the window, and the status of the system activity will be displayed next to it.

What folders are protected by  the integrity protection system  ?

System Integrity Protection provides security for the following system folders:
/ System
/ sbin
/ bin
/ usr (except / usr / local)
/ Applications (standard programs only)
Almost all folders protected by the SIP system are hidden from the user by default, but they can be accessed.
These folders are protected from editing, deleting, moving, etc. even with root access. Sometimes the SIP system is called "rootless". You can change the files of these folders only by disconnecting the system, which requires an administrator password and "boot" access.
With SIP, you can not accidentally or intentionally delete important system files on Mac OS. Do not turn off the system without good reason. In which case, it will need to be activated immediately.
Recall that the SIP system is active by default in all modern versions of Mac OS. Among them: macOS Mojave, macOS High Sierra, MacOS Sierra and Mac OS X El Capitan. Most likely, this will not change in the future versions of the system. In older versions, the system is not supported at all, i.e. and its status can not be verified.