macOS 筆記

csrutil

• 只能在 Recovery Mode 底下關閉
• 意義：System Integrity Protection (SIP)

  jazzwang:~$ csrutil 
  usage: csrutil <command>
  Modify the System Integrity Protection configuration. All configuration changes apply to the entire machine.
  Available commands:
  
      clear
          Clear the existing configuration.
      disable
          Disable the protection on the machine. Only available in Recovery OS.
      enable
          Enable the protection on the machine. Only available in Recovery OS.
      status
          Display the current configuration.
  
      netboot
          add <address>
              Insert a new IPv4 address in the list of allowed NetBoot sources.
          list
              Print the list of allowed NetBoot sources.
          remove <address>
              Remove an IPv4 address from the list of allowed NetBoot sources.
  
  
      authenticated-root
          status
              Show the current authenticated root setting.
          disable
              Allow booting from non-sealed system snapshots. Only available in Recovery OS.
          enable
              Only allow booting from sealed system snapshots. Only available in Recovery OS.
  

spotlight

• 先確認 SIP 是 disable，再關閉 Spotlight

  jazzwang:~$ csrutil status
  System Integrity Protection status: disabled.
  jazzwang:~$ sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.metadata.mds.plist
  Password:
  

• 參考：​https://gist.github.com/adamstac/1249295

softwareupdate

• Execute the following command to instruct a computer to download a full installer for macOS 12.2:

  softwareupdate --fetch-full-installer --full-installer-version 12.2
  

purge

• Linux 底下可以用 vm.drop_caches=3 來清除不必要的記憶體

  sudo purge
  

dscl

• Making a user account an administrator on Mac (Terminal)
• ​https://teamdynamix.umich.edu/TDClient/47/LSAPortal/KB/ArticleDet?ID=1981

1. SSH into computer, or find and add it to Apple Remote Desktop.
2. Run the following command:

   dscl . -append /Groups/admin GroupMembership username
   

• Please note: An alternative method is to use the following command, but it will only work on Macs bound to Active Directory (not common)

  dseditgroup -o edit -a username -t user admin