As described later on this page, rEFInd 0.10.0 and later provide SIP control features, but they're disabled by default—except on the USB flash drive and CD-R images available from the rEFInd downloads page. On these images, the SIP control features are enabled, and can toggle between the two main modes you can set via csrutil enable and csrutil disable in the Recovery HD system.
Whether or not you've enabled these SIP features in refind.conf, rEFInd displays the current SIP status on its "About" page
Unfortunately the rEFInd boot menu second row doesn't show the "Shield" icon, and the "About" page doesn't show the System Integrity Protection status at all (it goes from the "Platform" line to the "Firmware" line.
My setup: VirtualBox 6.1.6r137129, Windows 10 host, Mac OS X 10.13.6 (High Sierra) guest.
I originally tried booting into the Mac by holding down the Option (Alt) key but this did not present the Mac bootmanager. I took the (desperate) step of renaming the VirtualBox .nvram file to be something else temporarily, and this allowed me to boot the rEFInd CD image. Anything else I tried before renaming the .nvram file caused the Mac to boot normally.
Is there something I need to do when booting from refind-cd-0.12.0.iso in order for the rEFInd boot menu to show the "Shield" icon?
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi,
According to Disabling SIP with rEFInd:
And at Using rEFInd to Manage SIP:
Unfortunately the rEFInd boot menu second row doesn't show the "Shield" icon, and the "About" page doesn't show the System Integrity Protection status at all (it goes from the "Platform" line to the "Firmware" line.
My setup: VirtualBox 6.1.6r137129, Windows 10 host, Mac OS X 10.13.6 (High Sierra) guest.
I originally tried booting into the Mac by holding down the Option (Alt) key but this did not present the Mac bootmanager. I took the (desperate) step of renaming the VirtualBox .nvram file to be something else temporarily, and this allowed me to boot the rEFInd CD image. Anything else I tried before renaming the .nvram file caused the Mac to boot normally.
Is there something I need to do when booting from refind-cd-0.12.0.iso in order for the rEFInd boot menu to show the "Shield" icon?
Bump -- can anyone help?