{"id":45068,"date":"2024-09-23T15:09:06","date_gmt":"2024-09-23T19:09:06","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=45068"},"modified":"2024-09-25T15:28:36","modified_gmt":"2024-09-25T19:28:36","slug":"sequoias-spctl-and-csrutil","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2024\/09\/23\/sequoias-spctl-and-csrutil\/","title":{"rendered":"Sequoia’s spctl and csrutil"},"content":{"rendered":"

Rich Trouton<\/a>:<\/p>\n

\n

On macOS Sequoia, running the [sudo spctl –global-disable<\/code>] command to disable Gatekeeper produces the following output:<\/p>\n

Globally disabling the assessment system needs to be confirmed in System Settings.<\/p><\/blockquote>\n<\/blockquote>\n

This seems to be an intentional change—security through preventing automation.<\/p>\n\n

Jeff Johnson<\/a> (Mastodon<\/a>):<\/p>\n

\n

Today I learned that I can no longer change the startup security policy or disable System Integrity Protection (SIP) on any of the boot volumes.<\/p>\n

[…]<\/p>\n

When I open Terminal app in the recovery volume and enter csrutil disable<\/code> to disable SIP, I get the following error:<\/p>\n

csrutil: Failed to update security configuration for \"Sequoia\": Failed to create paired recovery local policy<\/code><\/blockquote>\n<\/blockquote>\n

I’m not sure what’s happening here. It seems like installing Sequoia changed something in his Mac’s firmware so that csrutil<\/code> no longer works with previous macOS versions, either.<\/p>\n\n

Previously:<\/p>\n