sebus Posted January 1, 2022 Share Posted January 1, 2022 (edited) Got updates offered to Safari, Device Support Update, but NO main OS itself. Originally installed 11.5.1, no update. So updated from full installer to 11.6.1 Again, nothing OS offered (to 11.6.2) No error from softwareupdate, just nothing. Anybody has any idea? Opencore 0.7.7 with iMac17,1 definition softwareupdate dump-state.txt Edited January 4, 2022 by sebus Link to comment Share on other sites More sharing options...
sebus Posted January 4, 2022 Author Share Posted January 4, 2022 (edited) It turned out that it was caused by csr-active-config ➤ EF0F0000 (csrutil authenticated-root disable) Which I think is a wrong value for Big Sur (my fault for applying it), as it should be FF0F0000 But changed to 67000000 - SIP completely disabled and Software Updates did appear as expected Picked the hint from this thread sebus Edited January 4, 2022 by sebus Link to comment Share on other sites More sharing options...
Guest 5T33Z0 Posted January 4, 2022 Share Posted January 4, 2022 @sebus Actually, 67000000 does not completely disable SIP. Instead, it sets these flags (it's Clover's old default value): Active values for 0x67 (103) : CSR_ALLOW_UNTRUSTED_KEXTS - 0x1 (1) CSR_ALLOW_UNRESTRICTED_FS - 0x2 (2) CSR_ALLOW_TASK_FOR_PID - 0x4 (4) CSR_ALLOW_UNRESTRICTED_DTRACE - 0x20 (32) CSR_ALLOW_UNRESTRICTED_NVRAM - 0x40 (64) In other words: only 5 of the possible 12 flags are set. So SIP is not completely disabled. FF0F0000 does that (which is not recommended): Active values for 0xFFF (4,095) : CSR_ALLOW_UNTRUSTED_KEXTS - 0x1 (1) CSR_ALLOW_UNRESTRICTED_FS - 0x2 (2) CSR_ALLOW_TASK_FOR_PID - 0x4 (4) CSR_ALLOW_KERNEL_DEBUGGER - 0x8 (8) CSR_ALLOW_APPLE_INTERNAL - 0x10 (16) CSR_ALLOW_UNRESTRICTED_DTRACE - 0x20 (32) CSR_ALLOW_UNRESTRICTED_NVRAM - 0x40 (64) CSR_ALLOW_DEVICE_CONFIGURATION - 0x80 (128) CSR_ALLOW_ANY_RECOVERY_OS - 0x100 (256) CSR_ALLOW_UNAPPROVED_KEXTS - 0x200 (512) CSR_ALLOW_EXECUTABLE_POLICY_OVERRIDE - 0x400 (1,024) CSR_ALLOW_UNAUTHENTICATED_ROOT - 0x800 (2,048) EF0F0000 is the recommended value for Monterey: Active values for 0xFEF (4,079) : CSR_ALLOW_UNTRUSTED_KEXTS - 0x1 (1) CSR_ALLOW_UNRESTRICTED_FS - 0x2 (2) CSR_ALLOW_TASK_FOR_PID - 0x4 (4) CSR_ALLOW_KERNEL_DEBUGGER - 0x8 (8) CSR_ALLOW_UNRESTRICTED_DTRACE - 0x20 (32) CSR_ALLOW_UNRESTRICTED_NVRAM - 0x40 (64) CSR_ALLOW_DEVICE_CONFIGURATION - 0x80 (128) CSR_ALLOW_ANY_RECOVERY_OS - 0x100 (256) CSR_ALLOW_UNAPPROVED_KEXTS - 0x200 (512) CSR_ALLOW_EXECUTABLE_POLICY_OVERRIDE - 0x400 (1,024) CSR_ALLOW_UNAUTHENTICATED_ROOT - 0x800 (2,048) For Big Sur, I use 67080000 which sets the following flags: Active values for 0x867 (2,151) : CSR_ALLOW_UNTRUSTED_KEXTS - 0x1 (1) CSR_ALLOW_UNRESTRICTED_FS - 0x2 (2) CSR_ALLOW_TASK_FOR_PID - 0x4 (4) CSR_ALLOW_UNRESTRICTED_DTRACE - 0x20 (32) CSR_ALLOW_UNRESTRICTED_NVRAM - 0x40 (64) CSR_ALLOW_UNAUTHENTICATED_ROOT - 0x800 (2,048) Link to comment Share on other sites More sharing options...
T0pol Posted January 26, 2022 Share Posted January 26, 2022 I have the same problem : Safari has been updated but no Big Sur Update my Opencore config.plist has : <key>csr-active-config</key> <data>AAAAAA==</data> What value should I put here ? Link to comment Share on other sites More sharing options...
Guest 5T33Z0 Posted January 26, 2022 Share Posted January 26, 2022 1 hour ago, T0pol said: I have the same problem : Safari has been updated but no Big Sur Update my Opencore config.plist has : <key>csr-active-config</key> <data>AAAAAA==</data> What value should I put here ? ZwgAAA== Link to comment Share on other sites More sharing options...
T0pol Posted January 27, 2022 Share Posted January 27, 2022 10 hours ago, 5T33Z0 said: ZwgAAA== still no update offered, maybe my opencore is too old :0.6.7 Link to comment Share on other sites More sharing options...
Guest 5T33Z0 Posted January 27, 2022 Share Posted January 27, 2022 Most likely, yes. Use OpenCore Auxiliary Tools to update it. https://github.com/5T33Z0/OC-Little-Translated/tree/main/D_Updating_OpenCore Link to comment Share on other sites More sharing options...
T0pol Posted January 27, 2022 Share Posted January 27, 2022 thanks, I will try this on an usb stick . I still do not understand why the previous update has been offered, installed and without any trouble. Link to comment Share on other sites More sharing options...
Recommended Posts