- After applying the post-install root patches, SIP will be (at least partially) disabled? Correct?
- Updates from Apple will work as usual or do you need to re-install the root patches after some of them?
I have a 2012 Mac Mini with Catalina and I'm wondering if it's worth to upgrade to Big Sur (without dealing with post-install root patches) or Monterey (root patches required for GPU drivers/SIP disabled).
You only need the root patches if you want Nvidia Kepler acceleration, you don't need it for intel graphics.
Have another macbook air 11" (early 2014) that's stuck on Big Sur. Mentally valuing the options - last monterey patch fixed two 0-days, there's no patch for big sure. So is it better to go with Monterey and sacrifice a bit of SIP?
csrutil looks like this, FWIW: $ csrutil status System Integrity Protection status: unknown (Custom Configuration).
Configuration: Apple Internal: disabled Kext Signing: enabled Filesystem Protections: disabled Debugging Restrictions: enabled DTrace Restrictions: enabled NVRAM Protections: enabled BaseSystem Verification: enabled
This is an unsupported configuration, likely to break in the future and leave your machine in an unknown state.
The OCLP project came a long way, at first it wasn't very stable, but with later versions it got better. Make sure you have the latest version and all works well.
csrutil statuscsrutil status says "enabled." in this case.