1

I am trying to add a file in /SYSTEM/Library.

  1. I've restarted the mac in recovery mode.
  2. Ran csrutil disable in Terminal.
  3. Logged back in and tried to copy the file in /SYSTEM/Library only to be denied as if SIP was still enabled.

I even tried to change permissions on the whole SYSTEM folder by adding a user read/write privileges only to get "The operation can't be completed because you don't have the necessary permission."

Improve this question
2
  • Catalina's System drive is read only, disabling SIP doesn't unlock it. use the user library instead, that's what it's for.
    – Tetsujin
    Commented Mar 14, 2020 at 8:02
  • @Tetsujin - using user library wouldn't work in all cases. Perhaps you want to update logon screen wallpaper by replacing /System/Library/Desktop\ Pictures/Catalina.heic with your own picture for example.
    – lx07
    Commented Mar 14, 2020 at 10:55

1 Answer 1

Reset to default
0

Starting with macOS 10.15 Catalina the system volume is read-only. See this Apple support page About the read-only system volume in macOS Catalina

To change files in /System/Library/ therefore, after disabling SIP from recovery, boot into your normal macOS environment and remount the system volume read-write with sudo mount -uw /

[admin@macOS] / $csrutil status
System Integrity Protection status: disabled.
[admin@macOS] / $sudo touch /System/Library/testfile
touch: /System/Library/testfile: Read-only file system
[admin@macOS] / $sudo mount -uw /
[admin@macOS] / $sudo touch /System/Library/testfile
[admin@macOS] / $sudo rm /System/Library/testfile

If you want to update the file using Finder rather than Terminal once you have re-mounted the system volume you must also enter killall Finder (note case matters so capital F for Finder).

The read-write mount option only applies to the current session - when you reboot it will again mount as read-only.

Alternatively you can add/update/delete your file by mounting the system volume from recovery or another instance of macOS.

Improve this answer
4
  • So do I have to do this while in recovery mode and add my file as well before rebooting again in order to maintain the read-write session active?
    – Jose Lopez
    Commented Mar 14, 2020 at 13:21
  • Or can it be done in a regular session in terminal?
    – Jose Lopez
    Commented Mar 14, 2020 at 13:22
  • You first have to disable SIP in recovery (like you did). Then boot into normal macOS environment and the above was done in a regular terminal session. I've updated the answer to clarify.
    – lx07
    Commented Mar 14, 2020 at 13:32
  • Thank you! It worked.
    – Jose Lopez
    Commented Mar 14, 2020 at 13:56

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .