SIP Status Extension Attribute

nigelg
Contributor

Returns either enabled or disabled or a blank value on <10.11 machines.

#!/bin/sh

result=$(csrutil status | awk '{ print $5 }' | tr -d '.')

echo "<result>$result</result>"
3 REPLIES 3

roiegat
Contributor III

I love having to explain to management why I can't get rid of Chess. While I applaud them for their ultra protective mode - but they should let us get rid of some apps.

Good EA though...will add it to our inventory to check machines.

djdavetrouble
Contributor III

I just use a policy to make things invisible, instead of deleting it.

rtrouton
Release Candidate Programs Tester

I have a SIP EA, which checks the OS version and returns different output depending on if your Mac is running 10.11.x or later, or 10.10.x and earlier. It's available via the link below:

https://github.com/rtrouton/rtrouton_scripts/tree/master/rtrouton_scripts/Casper_Extension_Attribute...