@allan.nyholm Oh, thank you very much! I will try this later on.
I used to use LiteIcon all of the time, glad to see it still exists and has an up-to-date version. So just to clarify: type csrutil disable (with or without quotes?) into terminal, and then if I turn it back on, will I have issues with rebooting? Or did you mean that the computer requires a reboot after making this change? I don't mind having to change the setting each time I want to change icons.
Is there any downside to leaving SIP off as you do?
-
no quotes. I haven't experienced any issues but the one down the text - though I'll likely never really know what its like using a Mac with SIP turned on for an extended period of time .. the whole OS is open for me to interact with and I enjoy that. I can't stop changing files or modding my OS so for me to reboot to change SIP ...no, it's not going to happen.
For the purpose of installing any Dock theme -
MySIMBL has to be installed alongside
cDock. Those require SIP to be turned off also. Also disabling AMFI(in the case of MySIMBL) using:
nvram boot-args="amfi_get_out_of_my_way=1"
this time with quotes. It's what I do anyways. MySIMBL explains that it has to be turned off for some injection to happen. And what else to do than disable AMFI
clears the nvram and returns AMFI to it's original state.
You could use
ActiveDock that doesn't require SIP to be turned off. From
http://www.noteifyapp.com/activedock/
It doesn't have the whole features set of the Dock just yet but it's in active development. The beta updates are strong with this one.
With regards to issues - I experience only one that I don't know if its the fact that I use an external SSD for booting and contains macOS High Sierra; It takes a little while longer for me to boot - It could also be a mind trick thing where I believe that SIP has that much power over me.
One more issue is that injection is easier with SIP off. I haven't experienced any system injection other than what I inject myself - I feel I can work around most stuff using tools that help monitor injections from the outside world like those from
https://objective-see.com and using anti-malware from malwarebytes. Though nothing ever activates these.
csrutil enable --without fs
might work in the case of LiteIcon - but I just turn everything off.
There's also other csrutil options for you to try;
(From a user on Apple Support forums named Max)
If you run csrutil status, even while booted normally,
you will see the component parts of it. Each of these can be selectively disabled by running one of the following commands while booted into Recovery mode:
- csrutil status shows the current status of System Integrity Protection)
- csrutil enable --no-internal
- csrutil enable --without kext
- csrutil enable --without fs
- csrutil enable --without debug
- csrutil enable --without dtrace
- csrutil enable --without nvram
You can disable two or more components by structuring the command as follows:
- csrutil enable --without kext --without debug