Skip to main content
Question

SIP Status Extension Attribute

N
Forum|alt.badge.img+6

Returns either enabled or disabled or a blank value on <10.11 machines.

#!/bin/sh

result=$(csrutil status | awk '{ print $5 }' | tr -d '.')

echo "<result>$result</result>"

    3 replies

    roiegat
    Forum|alt.badge.img+16
    • roiegat
    • Valued Contributor
    • 412 replies
    • August 31, 2016

    I love having to explain to management why I can't get rid of Chess. While I applaud them for their ultra protective mode - but they should let us get rid of some apps.

    Good EA though...will add it to our inventory to check machines.

    D
    Forum|alt.badge.img+14
    • djdavetrouble
    • Valued Contributor
    • 131 replies
    • August 31, 2016

    I just use a policy to make things invisible, instead of deleting it.

    R
    Forum|alt.badge.img+31
    • rich.trouton
    • Hall of Fame
    • 920 replies
    • August 31, 2016

    I have a SIP EA, which checks the OS version and returns different output depending on if your Mac is running 10.11.x or later, or 10.10.x and earlier. It's available via the link below:

    https://github.com/rtrouton/rtrouton_scripts/tree/master/rtrouton_scripts/Casper_Extension_Attributes/check_system_integrity_protection_status

    burdett
    1 person likes this
    • burdett
      burdett

    Reply


    Most helpful members this week

    Terms & ConditionsCookie settingsAccessibility statement

    Cookie policy

    We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

     
    Cookie settings