Hacker News new | past | comments | ask | show | jobs | submit login

You can have partially enabled SIP. With CSR = 0x01, SIP is fully enabled except kext signing, more secure then disabled SIP.

I mean, if you want SIP, you can leave it fully enabled and load all custom kernel extensions with Clover, as I mentioned.

As I see it, if you're the kind of user who's installing Hackintosh, you're also probably savvy enough to not grant root permission to just any software. I want to have full control over my computer.

Selectively disabling parts of SIP is unsupported, FYI

What do you mean? You can always check: 'csrutil status'. I have all items enabled except kext signing.

Does csrutil status not give you the "This is an unsupported configuration, likely to break in the future and leave your machine in an unknown state." warning?

Warning, not error. And it shows the rest of protections enabled, good enough for me.

I guess if you’re willing to live dangerously it can’t hurt :)

It is hackintosh. All guides tell you to disable SIP, so I live rather cautiously :)

So are Hackintoshs?

Apple shames you for doing that instead of telling you it's unsupported.

Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | Legal | Apply to YC | Contact