SIP and rootless: protecting more than just system files SIP protects your Mac from rogue KEXTs too, and prevents tools from attaching to protected processes.