1.进入RecoveryHD

开机按住Option键在出现的启动选择菜单中选择RecoveryHD进入恢复模式

2.使用csrutil命令

打开终端Terminal，键入csrutil可以显示该命令的使用方法

usage: csrutil
Modify the System Integrity Protection configuration. All configuration changes apply to the entire machine.
Available commands:

clear
Clear the existing configuration. Only available in Recovery OS.
disable
Disable the protection on the machine. Only available in Recovery OS.
enable
Enable the protection on the machine. Only available in Recovery OS.
status
Display the current configuration.

netboot
add address
Insert a new IPv4 address in the list of allowed NetBoot sources.
list
Print the list of allowed NetBoot sources.
remove address
Remove an IPv4 address from the list of allowed NetBoot sources.

可以看到在正常系统模式下中仅可以用status命令查询SIP状态

3.常用参数

clear：清除配置设置，等同于完全开启SIP(仅在恢复模式下有效)
disable：关闭SIP(仅在恢复模式下有效)
enable：开启SIP(仅在恢复模式下有效)
status：查询SIP状态