System Integrity Protection (SIP)
Apple has implemented a new security feature, System Integrity Protection (SIP), starting with OS X 10.11. SIP prevents anyone from altering the contents of files in key System folders and is designed to protect System files from malware and viruses. SIP also affects third-party apps like Winclone that need to write to files now under protection of SIP. If you are getting an message that the boot sector cannot be updated, or that SIP needs to be disabled, this article may help.
Disabling SIP is a quick and easy process that can be easily re-enabled again after restoring the Winclone image.
Note: Saving/creating a Winclone image does not require disabling SIP.
How to Disable SIP
Disabling SIP requires booting into the recovery partition to run the Terminal command below.
To boot into the Recovery partition, hold Command-R while restarting the Mac.
From the Utilities Menu, select Terminal. On the Terminal command line, enter:
csrutil disable
which will confirm the change with status message:
Successfully disabled System Integrity Protection. Please restart the machine for the changes to take effect.
Reboot back into the El Capitan system partition.
To re-enable SIP, boot back into the recovery partition, open Terminal from the Utilities menu and set state to enabled:
csrutil enable
Note: As of MacOS Sierra 10.12.2, it is possible to re-enable SIP from the Mac system rather than reboot into the Recovery HD. To re-enable SIP, run this command as root in Terminal:
/usr/bin/csrutil clear
Entering your system password and hit enter and the output should be:
Successfully cleared System Integrity Protection. Please restart the machine for the changes to take effect.
What if the “csrutil” command is not found?
If the “csrutil disable” command fails when booted into the Recovery HD, there are two possible reasons: either there is no local Recovery HD and the Mac is booted from Internet Recovery or there is a local Recovery HD but it has not been updated to OS X 10.11 El Capitan.
First, confirm that there is a local Recovery HD on your Mac’s internal drive. Open Applications-> Utilities-> Terminal and enter:
diskutil list
You’ll be looking for the Recovery HD in the third partition, with ID disk0s3. If you don’t find Recovery HD in the list of partitions, the Recovery HD can be created using tools and instructions linked below.
After creating the Recovery HD, you will need to run the OS X 10.11 El Capitan update again, even if the Mac has already been updated with the latest OS X 10.11 El Capitan version. From the App Store select the Purchased tab and download the OS X 10.11 El Capitan update and run the update. Next, boot into the Recovery HD and the csrutil command should successfully disable SIP.
https://github.com/MagerValp/Create-Recovery-Partition-Installer – Open Source project that creates a package to create and update the Recovery HD
http://bombich.com – Carbon Copy Cloner can create the Recovery HD
http://lifehacker.com/re-create-os-xs-recovery-partition-if-youve-removed-it-1585382425http://musings.silvertooth.us/2014/07/recovery-partition-creator-3-8/Добавлено спустя 4 минуты 4 секунды:How to disable and enable System Integrity Protection in MAC OSX 10.11
Apple has added a new security feature in 10.11 that disabled the ability to edit system files.
This feature will protect anything that could potentially be malicious on your system.
It is recommended that you know what you are doing before you disable this feature as this could damage your system.
Here is a list of directories you cannot change if this feature is on:
/System
/sbin
/usr
So if you need to change these directories, you will need to follow some steps first.
Checking if System Integrity Protection it is enabled.
First check that the feature is enabled.
csrutil status
it should return something like this:
System Integrity Protection status: enabled.
Disabling System Integrity Protection.
To disable it you will need to go into recovery mode, if you try to do it not in recovery mode you will get the following error.
csrutil: failed to modify system integrity configuration. This tool needs to be executed from the Recovery OS. To get in to the recovery OS we will need to turn off the Mac.
Press on and Command ⌘ + R keys and press the power button.
The system will look like it booting as normal but it should boot into a minified version of the MAC OSX, which only has the tools, needed to recover your system.
Next go to the top and click terminal.
When the terminal appears you can enter this command
csrutil disable
It will tell you that the System Integrity Protection disabled and requires a reboot for the changes to take effect.
Next type the reboot command in the terminal.
That’s System Integrity Protection disabled.
How to Re-Enabling System Integrity Protection
It is highly recommended to enable this feature once your finished as this does protect from anything malicious on the system attempting to change any system files.
Go into the recovery OS as before and open terminal as before.
In the terminal enter
csrutil enable
(Голосов: 
