How to check if System Integrity Protection (SIP) is enabled on your Mac

System Integrity Protection (SIP) is a macOS feature that is designed to safe-guard malware by restricting the access to protected files and folders. You’re not able to edit or remove protected files and folders even if you’re a root user.

SIP is available since macOS El Capitan and is enabled by default. However it appears that SIP is turned off for some users of the new MacBook Pro late 2016. Apple is aware of the issue and will likely issue a fix in a future update.  

You can check the SIP status of your Mac using the following Terminal command:

$ csrutil status
System Integrity Protection status: enabled.

You should get back an “enabled” status. It is advisable to pay Apple Support a visit if SIP in your brand new Mac is disabled by default.