alt Hacker NewsYou appear to be confusing System Integrity Protection with the Signed System Volume. FileVault works fine with SIP disabled. But you can't disable SSV without disabling FileVault.
You appear to be confusing System Integrity Protection with the Signed System Volume. FileVault works fine with SIP disabled. But you can't disable SSV without disabling FileVault.
Yes, this is true! I was thinking about "disabling SIP" in the sense of being able to modify the system to e.g. disable the Spotlight launchd service. My mistake.
But still -- you can't "unlock" the system (in this sense) without disabling SSV, which requires disabling FileVault.
(Unless I'm wrong about that too, and there is a way to disable Spotlight without disabling SSV)