Can we have a brief understanding for the various components of macOS SIP

[TomHsiung]

Hi, pals

csrutil status

gives me

Configuration: Apple Internal: disabled Kext Signing: enabled Filesystem Protections: enabled Debugging Restrictions: disabled DTrace Restrictions: enabled NVRAM Protections: enabled BaseSystem Verification: enabled Boot-arg Restrictions: enabled Kernel Integrity Protections: enabled Authenticated Root Requirement: enabled

Can we know what the main functions of each of these SIP components? I did not find any useful information. Many thanks.

[CatMe0w]

https://eclecticlight.co/2024/08/21/controlling-system-integrity-protection-using-csrutil-a-reference/