Skip to main content
Question

SIP Status Extension Attribute

  • August 31, 2016
  • 3 replies
  • 25 views
N
Forum|alt.badge.img+6

Returns either enabled or disabled or a blank value on <10.11 machines.

#!/bin/sh

result=$(csrutil status | awk '{ print $5 }' | tr -d '.')

echo "<result>$result</result>"

    3 replies

    roiegat
    Forum|alt.badge.img+16
    • roiegat
    • Valued Contributor
    • August 31, 2016

    I love having to explain to management why I can't get rid of Chess. While I applaud them for their ultra protective mode - but they should let us get rid of some apps.

    Good EA though...will add it to our inventory to check machines.

    D
    Forum|alt.badge.img+14
    • djdavetrouble
    • Valued Contributor
    • August 31, 2016

    I just use a policy to make things invisible, instead of deleting it.

    R
    Forum|alt.badge.img+33
    • rich.trouton
    • Hall of Fame
    • August 31, 2016

    I have a SIP EA, which checks the OS version and returns different output depending on if your Mac is running 10.11.x or later, or 10.10.x and earlier. It's available via the link below:

    https://github.com/rtrouton/rtrouton_scripts/tree/master/rtrouton_scripts/Casper_Extension_Attributes/check_system_integrity_protection_status

    burdett
    Terms & ConditionsCookie settingsAccessibility statement