Anand Pandit's Blog

macOS SIP supports a set of hidden options to disable few sections of SIP by passing hidden options to csrutil tool.   Each of these can be selectively disabled by running one of the following commands while booted into Recovery mode: csrutil enable --no-internal csrutil enable --without kext csrutil  enable  --without fs csrutil  enable  --without debug csrutil  enable  --without dtrace csrutil  enable  --without nvram You can disable two or more components by structuring the command as follows: csrutil enable --without kext  --without debug How to disable /enable to SIP , refer to  http://anandmpandit.blogspot.in/2015/11/how-to-disable-system-integrity.html .  Note : These options are tested on macOS ElCapitan , on higher version of macOS some or all of them may not work.

System Integrity Protection  or Rootless mode is a security feature of OS X El Capitan operating system  by Apple Inc. It protects certain system processes, file and folders from being modified or tampered with by other processes even when executed by the root user or by a user with root privileges(sudo). Following are the  the key concepts of System Integrity Protection. 1. System Locations Cannot Be Written To  -  System files can be modified only by system processes signed with Apple’s code signing identity. App processes should instead write to locations designated for third-party developers. The following directories can only be written to by the system:  System-Only Locations      ● /bin      ● /sbin      ● /usr      ● /System  In contrast, the following directories are available to any process:  Locations Available to Developers    ...