SIP and ‘rootless’: El Cap going beyond permissions So which files and folders does SIP protect, and how can you work around it?