Well, I have exactly the opposite plans, I will leave it on unless I come to a situation where I need to turn it off. I am not quite sure how much safer in practice the new system will be, but it does put an additional layer of protection between critical files and applications that believe they can place files wherever they want.
I have seen too many badly written installers that feel they can muck with any other application/s configurations too allow this as default. If system integrity works as promised then the need to run fix permissions will completely go away. In fact, I have heard that it has been removed from disk utility. Questions do abound, If I turn off system integrity and then add a file to /usr/bin (yes, I know /usr/local/bin is the appropriate place) and then turn system integrity back on, will that file be removed? Presently, the only reason, I can think of that this will get in my way is if I decide to load a porting package and it decides to install in /the directories reserved for vendor supplied files. Best wishes, Jonathan > On Sep 18, 2015, at 14:24, Mike Arrigo <n0...@charter.net> wrote: > > I plan on turning it off, I don't want someone else deciding what I can and > cannot do with my computers. Of course, each user must decide if they want to > do this, but for me it will definitely be disabled. > Original message: >> I would be careful before turning this off. I believe that dropbox will >> still work, but just in a different integration with the finder. These >> solutions are designed to make the Macintosh more secure by only allowing >> applications with a specific internal flag set to have access to the >> essential parts of the Operating System. Apple knows that Dropbox / One >> Drive / Google Docs are essential functions of the modern computer user and >> will not block them entirely. What they are doing is preventing programs >> from saying for example Hey I'll replace the open dialogs available in all >> applications with a new one. So, it will be that much more difficult for >> applications to take read and write to every file and peripheral on the >> computer without permission from the kernel. > >> I underestand the default folder X application that power users use to >> re-route certain files to a different spot in more hampered than dropbox. > >> Ifyou want details on this security option, there was a very interesting >> talk given at WWDC which I think is available on Youtube on the enhanced >> security of 10.11, and all of my opioons expressed above are based on this >> tak. > > > >> Jonathan Cohn > >> On Sep 18, 2015, at 10:07 AM, Mike Arrigo <n0...@charter.net> wrote: > >>>> From what I have read, you boot in to recovery, go to utilities and >>> choose the security application, then you uncheck the system integrity >>> protection check box. >>> Original message: >>>> Hi, > >>>> Can you give steps on how to disable this feature in recovery in general >>>> terms? > >>>> Thanks. > >>>> Eileen > >>>> Sent from my iPhone > >>>>> On Sep 17, 2015, at 1:41 PM, Mike Arrigo <n0...@charter.net> wrote: > >>>>> Hey everyone, I've been doing some reading on what will be coming in >>>>> version 10.11, el Capitan, it does appear as though Apple is getting more >>>>> restrictive with each release. In 10.10 they introduced kext signing >>>>> which only allows you to install kernel extentions that are signed by >>>>> Apple. Now, in 10.11, they are introducing what is called system >>>>> integrity protection. In a nutshell, what this does is prevent any >>>>> program from accessing or binding to running processes such as the finder >>>>> or dock. One program that apparently is affected by this is dropbox, the >>>>> finder integration will no longer work. Basically, it requires all >>>>> applications to be sandboxed, even those that are installed from outside >>>>> the app store. Even if a program requests elevated permissions where you >>>>> have to type in your password, that will no longer matter, the program >>>>> will no longer have this access. Fortunately, there will be a way to >>>>> disable this from the recovery, and that will be one of the first things >>>>> I do once I upgrade. > >>>>> -- >>>>> You received this message because you are subscribed to the Google Groups >>>>> "MacVisionaries" group. >>>>> To unsubscribe from this group and stop receiving emails from it, send an >>>>> email to macvisionaries+unsubscr...@googlegroups.com. >>>>> To post to this group, send email to macvisionaries@googlegroups.com. >>>>> Visit this group at http://groups.google.com/group/macvisionaries. >>>>> For more options, visit https://groups.google.com/d/optout. > >>>> -- >>>> You received this message because you are subscribed to the Google Groups >>>> "MacVisionaries" group. >>>> To unsubscribe from this group and stop receiving emails from it, send an >>>> email to macvisionaries+unsubscr...@googlegroups.com. >>>> To post to this group, send email to macvisionaries@googlegroups.com. >>>> Visit this group at http://groups.google.com/group/macvisionaries. >>>> For more options, visit https://groups.google.com/d/optout. > >>> -- >>> You received this message because you are subscribed to the Google Groups >>> "MacVisionaries" group. >>> To unsubscribe from this group and stop receiving emails from it, send an >>> email to macvisionaries+unsubscr...@googlegroups.com. >>> To post to this group, send email to macvisionaries@googlegroups.com. >>> Visit this group at http://groups.google.com/group/macvisionaries. >>> For more options, visit https://groups.google.com/d/optout. > >> -- >> You received this message because you are subscribed to the Google Groups >> "MacVisionaries" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to macvisionaries+unsubscr...@googlegroups.com. >> To post to this group, send email to macvisionaries@googlegroups.com. >> Visit this group at http://groups.google.com/group/macvisionaries. >> For more options, visit https://groups.google.com/d/optout. > > -- > You received this message because you are subscribed to the Google Groups > "MacVisionaries" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to macvisionaries+unsubscr...@googlegroups.com. > To post to this group, send email to macvisionaries@googlegroups.com. > Visit this group at http://groups.google.com/group/macvisionaries. > For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "MacVisionaries" group. To unsubscribe from this group and stop receiving emails from it, send an email to macvisionaries+unsubscr...@googlegroups.com. To post to this group, send email to macvisionaries@googlegroups.com. Visit this group at http://groups.google.com/group/macvisionaries. For more options, visit https://groups.google.com/d/optout.
