Path: csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: Jolly Roger Newsgroups: comp.sys.mac.apps Subject: Re: sierra? Date: 8 Oct 2016 19:57:19 GMT Organization: People for the Ethical Treatment of Pirates Lines: 48 Message-ID: References: <071020161315144458%nospam@nospam.invalid> <262dnatgxNiVemrKnZ2dnUU7-IHNnZ2d@giganews.com> <071020161443050717%nospam@nospam.invalid> X-Trace: individual.net wL5c7bZ3WVpolQymCoYy9AGPNMD7vSwMcBgYcpzb5QdDly/Egc Cancel-Lock: sha1:HKkVdY2rxcTi3qcQ2j5XTdgdspI= Mail-Copies-To: nobody User-Agent: slrn/1.0.1 (Darwin) Xref: csiph.com comp.sys.mac.apps:36753 On 2016-10-08, Happy.Hobo wrote: > On 10-07-2016 23:16, Jolly Roger wrote: >> Happy.Hobo wrote: >>> On 10-07-2016 19:37, Jolly Roger wrote: >>>> Note: If you are running El Capitan (10.11) or newer, you'll have to >>>> disable System Integrity Protection first, create the folders, then >>>> don't forget to re-enable SIP right afterwards to maintain that security >>>> protection. >>> >>> So how does Apple's installer-for-obsolete-version get around SIP >>> without rebooting? >> >> Not sure what you mean by "Apple's installer-for-obsolete-version" but >> Apple's software is signed with Apple certificates that give it access to >> the system. > > So SIP does not prevent installers built by Apple fom changing those things? If Apple's SIP prevented Apple's own software from doing what is needed with their own operating system, it wouldn't be very useful. : D >>> DimSum from MandarinTools.com is written in Java so >>> it wouldn't work until I ran that installer. >> >> Ok. ... >> >>> If SIP can be turned off and on without reboot, >>> then it isn't much protection. >> >> Who said a restart isn't required? > > It isn't A restart is required to dis/enable SIP. And yes, it's "much protection". : ) > if you can click on the installer and run it without disabling > SIP. The key words there are "without disabling SIP". SIP only has to be disable when you (or software such as an installer that is not signed and allowed) needs to make modifications to protected locations. ; ) -- E-mail sent to this address may be devoured by my ravenous SPAM filter. I often ignore posts from Google. Use a real news client instead. JR