dtrace errors when running opensnoop in El Capitan
You can white list portions of the restrictions when you boot to recovery HD and open terminal from the utilities window:

csrutil disable
csrutil enable --without dtrace


I haven't found good Apple documentation on this, but Rich Trouton has done a magnificent job documenting the internals of SIP on his blog and public speaking engagements:


https://derflounder.wordpress.com/2015/10/01/system-integrity-protection-adding-another-layer-to-apples-security-model/#more-7252
http://www.jamfsoftware.com/resources/os-x-security-defense-in-depth/