SIP
E906658
SIP is a macOS security technology that restricts system-level modifications to protect the operating system from malware and accidental damage.
All labels observed (1)
| Label | Occurrences |
|---|---|
| SIP canonical | 2 |
How this entity was disambiguated
This entity first appeared as the object of triple T11126765 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: SIP Context triple: [System Integrity Protection, alsoKnownAs, SIP]
-
A.
SIP
SIP is the IATA airport code for Simferopol International Airport, the main air gateway to the Crimean Peninsula.
-
B.
SIP
SIP is a Unicode supplementary plane that contains additional CJK ideographs beyond those in the Basic Multilingual Plane.
-
C.
Session Initiation Protocol
Session Initiation Protocol (SIP) is a signaling protocol used to establish, modify, and terminate real-time communication sessions such as voice and video calls over IP networks.
-
D.
VoIP
VoIP (Voice over Internet Protocol) is a technology that enables voice communications and multimedia sessions to be delivered over Internet Protocol (IP) networks instead of traditional telephone lines.
-
E.
H.323
H.323 is an ITU-T standard that defines protocols for voice, video, and data communication over packet-based networks such as IP.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: SIP Target entity description: SIP is a macOS security technology that restricts system-level modifications to protect the operating system from malware and accidental damage.
-
A.
SIP
SIP is the IATA airport code for Simferopol International Airport, the main air gateway to the Crimean Peninsula.
-
B.
SIP
SIP is a Unicode supplementary plane that contains additional CJK ideographs beyond those in the Basic Multilingual Plane.
-
C.
Session Initiation Protocol
Session Initiation Protocol (SIP) is a signaling protocol used to establish, modify, and terminate real-time communication sessions such as voice and video calls over IP networks.
-
D.
VoIP
VoIP (Voice over Internet Protocol) is a technology that enables voice communications and multimedia sessions to be delivered over Internet Protocol (IP) networks instead of traditional telephone lines.
-
E.
H.323
H.323 is an ITU-T standard that defines protocols for voice, video, and data communication over packet-based networks such as IP.
- F. None of above. chosen
Statements (49)
| Predicate | Object |
|---|---|
| instanceOf |
macOS security feature
ⓘ
operating system protection mechanism ⓘ |
| abbreviation | SIP ⓘ |
| affects | root user capabilities ⓘ |
| canBeDisabled | true ⓘ |
| configuration | enabled or disabled globally ⓘ |
| configurationTool | csrutil ⓘ |
| defaultState | enabled ⓘ |
| designGoal |
enforce integrity of system files and processes
ⓘ
limit damage from compromised root account ⓘ |
| developer | Apple Inc. ⓘ |
| disableMethod | using macOS Recovery environment ⓘ |
| documentedIn |
Apple Platform Security documentation
ⓘ
linked to:
Apple Developer Documentation
|
| enforcementLevel | kernel level ⓘ |
| feature | rootless security model ⓘ |
| implementedWith |
code signing enforcement
ⓘ
kernel-level checks ⓘ protected file system paths ⓘ |
| introducedBy | Apple Inc. ⓘ |
| introducedIn | OS X El Capitan ⓘ |
| introducedInVersion |
OS X 10.11
ⓘ
linked to:
OS X El Capitan
|
| operatingSystem | macOS ⓘ |
| platform | Mac ⓘ |
| protects |
/System directory
ⓘ
/bin directory ⓘ /sbin directory ⓘ /usr (excluding /usr/local) ⓘ certain system processes ⓘ kernel extensions loading process ⓘ pre-installed Apple applications ⓘ |
| purpose |
prevent accidental system damage
ⓘ
protect macOS from malware ⓘ restrict system-level modifications ⓘ |
| relatedTo |
FileVault
ⓘ
Gatekeeper ⓘ XProtect ⓘ |
| requires | reboot to change state ⓘ |
| restricts |
debugging of protected system processes
ⓘ
injection of code into protected processes ⓘ loading of unsigned kernel extensions ⓘ modification of NVRAM from user space ⓘ modification of protected system files ⓘ runtime attachment to system processes ⓘ |
| scope |
Apple-signed system binaries
ⓘ
system-level components ⓘ |
| securityModel | mandatory access control ⓘ |
| targetUsers | all macOS users ⓘ |
| threatModel |
accidental modification of critical system files
ⓘ
malicious software with root privileges ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: SIP Description of subject: SIP is a macOS security technology that restricts system-level modifications to protect the operating system from malware and accidental damage.
Referenced by (2)
Full triples — surface form annotated when it differs from this entity's canonical label.
subject linked to:
SIP