Skip to content

Instantly share code, notes, and snippets.

@applch
Created October 7, 2019 02:08
Show Gist options
  • Save applch/32cf07b80b7adfb93f2e4881062eeaf2 to your computer and use it in GitHub Desktop.
Save applch/32cf07b80b7adfb93f2e4881062eeaf2 to your computer and use it in GitHub Desktop.
Apple's System Integrity Protection(SIP) conf
cat /System/Library/Sandbox/rootless.conf
/Applications/Safari.app
/Library/Apple
TCC /Library/Application Support/com.apple.TCC
CoreAnalytics /Library/CoreAnalytics
NetFSPlugins /Library/Filesystems/NetFSPlugins/Staged
NetFSPlugins /Library/Filesystems/NetFSPlugins/Valid
/Library/Frameworks/iTunesLibrary.framework
KernelExtensionManagement /Library/GPUBundles
MessageTracer /Library/MessageTracer
AudioSettings /Library/Preferences/Audio/Data
/Library/Preferences/SystemConfiguration/com.apple.Boot.plist
KernelExtensionManagement /Library/StagedDriverExtensions
KernelExtensionManagement /Library/StagedExtensions
SoftwareUpdate /Library/Updates
/System
MobileAsset /System/Library/Assets
MobileAsset /System/Library/AssetsV2
* /System/Library/Caches
KernelExtensionManagement /System/Library/Caches/com.apple.kext.caches
* /System/Library/Extensions
/System/Library/Extensions/*
UpdateSettings /System/Library/LaunchDaemons/com.apple.UpdateSettings.plist
MobileAsset /System/Library/PreinstalledAssets
MobileAsset /System/Library/PreinstalledAssetsV2
* /System/Library/Speech
# template locations
* /System/Library/Templates/Data
* /System/Library/Templates/Data
/System/Library/Templates/Data/Applications/Safari.app
/System/Library/Templates/Data/Library/Apple
TCC /System/Library/Templates/Data/Library/Application Support/com.apple.TCC
CoreAnalytics /System/Library/Templates/Data/Library/CoreAnalytics
NetFSPlugins /System/Library/Templates/Data/Library/Filesystems/NetFSPlugins/Staged
NetFSPlugins /System/Library/Templates/Data/Library/Filesystems/NetFSPlugins/Valid
/System/Library/Templates/Data/Library/Frameworks/iTunesLibrary.framework
KernelExtensionManagement /System/Library/Templates/Data/Library/GPUBundles
MessageTracer /System/Library/Templates/Data/Library/MessageTracer
AudioSettings /System/Library/Templates/Data/Library/Preferences/Audio/Data
/System/Library/Templates/Data/Library/Preferences/SystemConfiguration/com.apple.Boot.plist
KernelExtensionManagement /System/Library/Templates/Data/Library/StagedDriverExtensions
KernelExtensionManagement /System/Library/Templates/Data/Library/StagedExtensions
SoftwareUpdate /System/Library/Templates/Data/Library/Updates
/System/Library/Templates/Data/System
MobileAsset /System/Library/Templates/Data/System/Library/Assets
MobileAsset /System/Library/Templates/Data/System/Library/AssetsV2
* /System/Library/Templates/Data/System/Library/Caches
KernelExtensionManagement /System/Library/Templates/Data/System/Library/Caches/com.apple.kext.caches
MobileAsset /System/Library/Templates/Data/System/Library/PreinstalledAssets
MobileAsset /System/Library/Templates/Data/System/Library/PreinstalledAssetsV2
* /System/Library/Templates/Data/System/Library/Speech
ConfigurationProfilesPrivate /System/Library/Templates/Data/private/var/db/ConfigurationProfiles/Settings
cvms /System/Library/Templates/Data/private/var/db/CVMS
ExtensibleSSO /System/Library/Templates/Data/private/var/db/ExtensibleSSO/Configuration
SystemPolicyConfiguration /System/Library/Templates/Data/private/var/db/SystemPolicyConfiguration
RoleAccountStaging /System/Library/Templates/Data/private/var/db/com.apple.xpc.roleaccountd.staging
datadetectors /System/Library/Templates/Data/private/var/db/datadetectors
dyld /System/Library/Templates/Data/private/var/db/dyld
timezone /System/Library/Templates/Data/private/var/db/timezone
* /System/Library/Templates/Data/private/var/folders
/System/Library/Templates/Data/private/var/install
* /System/Library/Templates/Data/usr/libexec/cups
* /System/Library/Templates/Data/usr/local
* /System/Library/Templates/Data/usr/share/man
* /System/Library/Templates/Data/usr/share/snmp
/System/Library/Templates/Data/etc
/System/Library/Templates/Data/tmp
/System/Library/Templates/Data/var
* /System/Library/Templates/Data/Users
* /System/Library/User Template
* /System/Volumes/Data
* /Users
/bin
ConfigurationProfilesPrivate /private/var/db/ConfigurationProfiles/Settings
cvms /private/var/db/CVMS
ExtensibleSSO /private/var/db/ExtensibleSSO/Configuration
SystemPolicyConfiguration /private/var/db/SystemPolicyConfiguration
RoleAccountStaging /private/var/db/com.apple.xpc.roleaccountd.staging
datadetectors /private/var/db/datadetectors
dyld /private/var/db/dyld
timezone /private/var/db/timezone
* /private/var/folders
/private/var/install
/sbin
/usr
* /usr/libexec/cups
* /usr/local
* /usr/share/man
* /usr/share/snmp
# symlinks
/etc
/tmp
/var
@magnusviri
Copy link

This is the Catalina file. The Mojave version is very different. Mojave didn't have the Data volume, but Catalina did. Mojave didn't have /System/Library/Templates/Data. Mojave had all of the Applications in /Applications, and they were all listed in the rootless file as well. This version only shows /Applications/Safari.app.

@applch
Copy link
Author

applch commented Jul 29, 2022

This is the Catalina file. The Mojave version is very different. Mojave didn't have the Data volume, but Catalina did. Mojave didn't have /System/Library/Templates/Data. Mojave had all of the Applications in /Applications, and they were all listed in the rootless file as well. This version only shows /Applications/Safari.app.

Thank you comment.
But I understand that, please read my article.
https://applech2.com/archives/201910-apple-update-sip-rootless-conf-on-macos-1015-catalina.html

@magnusviri
Copy link

I didn't realize this gist was for an article. I tried Google Translate but it didn't translate it. Unless there is some other way to translate it, unfortunately, I can't read it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment