I finally figured out the solutions as follows: **Solution 1** Use the Security Policy in the Startup Security Utility under the Utilities menu instead of Terminal, to downgrade the SIP level.
#Apple configuration utility doesnt work pro#
Same issue as you on my MacOS Monterey 12.0.1, Mackbook Pro 2021 with M1 Pro. Unfortunately this link file became a core part of the MacOS system protected by SIP after upgrading to Big Sur. On my old macbook, I created a symbolic link named "X11" under /usr to run XQuartz and forgot to remove the link with it later. the notorious "/Users/Shared/Previously Relocated Items" garbage, forgot to purge before upgrading to Catalina), do "sudo mount -uw /System/Volumes/Data/" first (run in the Terminal after normal booting).ĭon't forgot to enable the SIP after you have finished the job, either through the Startup Security Utility or the command "csrutil enable" in the Terminal.īTW, I'd appreciate if someone can help to remove some files under /usr because "mount -uw" doesn't work on the "/" root directory. If you want to delete some files under the /Data volume (e.g. Now do the "csrutil disable" command in the Terminal.Īssuming you have entered the Recovery mode already, by holding down the Power button when powering-up/rebooting. Run "csrutil clear" to clear the configuration, then "reboot". Use the Security Policy in the Startup Security Utility under the Utilities menu instead of Terminal, to downgrade the SIP level. I finally figured out the solutions as follows: The below CLI options specify what boot environments a downgrade can be performed from. Permanently downgrade the security settings.
#Apple configuration utility doesnt work software#
This helps ensure that only a physically-present user, not malicious software running in macOS, can Will only work when booted into 1TR, not when called from normal macOS or any other OS environment. We refer to this as One True Recovery (1TR), and most of the below downgrade options That precedent is extended here to detect the special boot to recoveryOS via holding the power key at boot time. Protection (SIP) was first introduced to Macs, it was decided that requiring a reboot to recoveryOS would provide intentional friction which would make it harder for malicious software to downgrade the It will only allow the below security-downgrading operations if it detects that the AP is in the intended boot state, and the OS pairing status is valid. Installations of macOS 11 Big Sur are paired to a single recoveryOS stored on a separate APFS volume group called “system recoveryOS”.īy design, the SEP application which is responsible for making changes to the LocalPolicy will inspect the boot state of the main Application Processor (AP), and the pairing status between the booted OS and Every installation of macOS 12 has its own paired recoveryOS with matching version stored on If you still cannot disable System Integrity Protection after completing the above, please let me know.Įxcerpted from `bputil` man page: macOS 12 Monterey introduced a new concept of "paired recoveryOS", and a new set of restrictions related to it. Then try starting up in macOS Recovery again. To fix this issue, start up in macOS Recovery, click the Apple logo, select Startup Disk, select your startup disk (likely Macintosh HD), and restart. This should only be an issue if you have multiple copies of macOS installed. In macOS Monterey or future, you must start up from the copy of macOS Recovery that is paired to your startup disk.If you landed in macOS Recovery without holding down the power button, you won't be able to downgrade the security policy until you shut down or restart. Holding down the power button proves that a human, not malicious software, is requesting a downgraded security policy. You must shut down or power off your Mac, then press and hold the power button (Touch ID) to load Startup Options.This is because the SIP configuration is stored directly in the Security Policy (aka the LocalPolicy). As mentioned by HW-Tech, Apple has added additional security restrictions for disabling System Integrity Protection (SIP) on Macs with Apple silicon.
0 kommentar(er)
