Unverified50% confidenceFactExact time
macOS System Integrity Protection (SIP) protects system paths including /System, /usr (except /usr/local), /bin, and /sbin, but the user home directory is not within SIP's protection scope.
1
Sources
50%
Confidence
Long-term
Relevance
8/10/2026
First Seen
Sources
Cursor AI Agent执行rm -rf删除主目录：事故复盘与防护指南
Related Claims
UnverifiedThe macOS SIP (System Integrity Protection) mechanism, introduced in macOS El Capitan (10.11), uses kernel-level mandatory access control to prevent ordinary processes from modifying protected paths even if they have root privileges.79% similarUnverifiedmacOS's Gatekeeper security mechanism checks whether an application has been Apple-notarized (Notarization) and developer-signed; when blocked, users can choose to open it anyway under System Settings > Privacy & Security.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/726769API
curl https://kongchang.com/api/v1/knowledge/claims/726769MCP
get_claim(id=726769)