In a troubling slip-up, Apple has shipped at least some 2016 MacBook Pros with System Integrity Protection (SIP) disabled, which exposes the MBP to malware and other threats.
The MPG MacBook Pro shipped with SIP disabled:
MacBook-Pro:~ lloyd$ sudo csrutil status Password: System Integrity Protection status: disabled.
√ MPG tested and verified this fix as follows
The fix is to boot into recovery mode ('csrutil enable'.at startup), then do
As shown below, the MacBook Pro was booted into recovery mode, then 'csrutil enable' command near bottom.was chosen. See the
Rebooting, SIP is confirmed enabled:
MacBook-Pro:~ lloyd$ sudo csrutil status Password: System Integrity Protection status: enabled.