User Profile

Is there an API to query for SIP Protected Paths or someway that this information can be deciphered ? Intent is to mute those paths or a subset for an ES client ?

I have a content filter hosted as system extension. Once you go through initial approvals for system extension & network filter everything seems fine. But if I navigate to System Settings --> Network --> Filters & disable the network filter, I am not able to enable it back again. It just stays in yellow, it does not go back to green. Reboot does not help, in fact the network extension process does not even get spawned. This is not desirable at all Has anyone ran into this ? Workarounds : Uninstall the app & perform the installation again by approving prompts.