SIP Status Extension Attribute

[nigelg]

Returns either enabled or disabled or a blank value on <10.11 machines.

#!/bin/sh

result=$(csrutil status | awk '{ print $5 }' | tr -d '.')

echo "<result>$result</result>"

[roiegat]

I love having to explain to management why I can't get rid of Chess. While I applaud them for their ultra protective mode - but they should let us get rid of some apps.

Good EA though...will add it to our inventory to check machines.

[djdavetrouble]

I just use a policy to make things invisible, instead of deleting it.

[rtrouton]

I have a SIP EA, which checks the OS version and returns different output depending on if your Mac is running 10.11.x or later, or 10.10.x and earlier. It's available via the link below:

https://github.com/rtrouton/rtrouton_scripts/tree/master/rtrouton_scripts/Casper_Extension_Attribute...