The "File System Protections" section of the System Integrity Protection Guide developer documentation incorrectly lists /Applications/Utilities as being SIP-protected

Originator:rtrouton
Number:rdar://22646088 Date Originated:10-Sep-2015 01:59 PM
Status:Closed Resolved:
Product:Documentation Product Version:
Classification:Other Bug Reproducible:Not Applicable
 
The System Integrity Protection Guide developer documentation includes a section named "File System Protections", which includes the following information:

------

The following directories can only be written to by the system:

System-Only Locations

/bin
/sbin
/usr
/System
/Applications/Utilities

------

Link to "File System Protections" section:

https://developer.apple.com/library/prerelease/mac/documentation/Security/Conceptual/System_Integrity_Protection_Guide/FileSystemProtections/FileSystemProtections.html#//apple_ref/doc/uid/TP40016462-CH2-DontLinkElementID_1


/Applications/Utilities is not listed in /System/Library/Sandbox/rootless.conf as being protected by SIP, though a number of applications within /Applications/Utilities are specified within /System/Library/Sandbox/rootless.conf as being protected.

You can use this command to read which entries in /System/Library/Sandbox/rootless.conf include /Applications/Utilities:

cat /System/Library/Sandbox/rootless.conf | grep "/Applications/Utilities"

The list as of OS X 10.11 GM (15A282b) is below:

/Applications/Utilities/Activity Monitor.app
/Applications/Utilities/AirPort Utility.app
/Applications/Utilities/Audio MIDI Setup.app
/Applications/Utilities/Bluetooth File Exchange.app
/Applications/Utilities/Boot Camp Assistant.app
/Applications/Utilities/ColorSync Utility.app
/Applications/Utilities/Console.app
/Applications/Utilities/Digital Color Meter.app
/Applications/Utilities/Disk Utility.app
/Applications/Utilities/Feedback Assistant.app
/Applications/Utilities/Grab.app
/Applications/Utilities/Grapher.app
/Applications/Utilities/Keychain Access.app
/Applications/Utilities/Migration Assistant.app
/Applications/Utilities/Script Editor.app
/Applications/Utilities/System Information.app
/Applications/Utilities/Terminal.app
/Applications/Utilities/VoiceOver Utility.app

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!