9,657 reputation
11436
bio website
location
age
visits member for 4 years, 7 months
seen 7 hours ago

1d
comment Startup disk not correctly identified?
It looks to me like 10.6 is only seeing the Yosemite recovery volume, not the main volume. Are you using FileVault volume encryption on the Yosemite system? If not, you might just need to turn off Core Storage management on the Yosemite volume.
Mar
24
comment Booting up gets hung up at around 50%
Taking a picture of the output (with a camera phone, or whatever's handy) is probably easier than trying to write it down, especially if some scrolls off screen.
Mar
18
comment Mac OSX : How to password protect an .app or other folder from deleting/moving by user/admin/root
@CommaToast Wow, I had no idea securelevel=1 had such far-reaching effects (and I wonder how much of that applies to OS X -- I may have to do some testing). Locking /private and /etc should take care of my worry about replacing /private/etc, but I don't see a reasonable similar way to lock e.g. an item in /Library/LaunchDaemons. Locking a system against an attacker with root access is really really hard, and I think at some point you have to just call it good enough. BTW, Apple does have a backdoor to reset firmware PWs, they just require proof of ownership before unlocking.
Mar
18
comment Mac OSX : How to password protect an .app or other folder from deleting/moving by user/admin/root
@CommaToast it depends on exactly how it's loaded. If it's via an item in /Library/LaunchDaemons it'd be by path not a fileReferenceURL or alias. Also, your opponent could replace /Library/LaunchDaemons and disable it that way, or replace /private/etc and hence remove the securelevel setting on next reboot.
Mar
18
comment Mac OSX : How to password protect an .app or other folder from deleting/moving by user/admin/root
@Omkar I've never written a kernel extension, so I can't offer much advice, except to say that if you aren't particularly familiar with the kernel, your extension has a good chance of creating security problems.
Mar
18
comment Mac OSX : How to password protect an .app or other folder from deleting/moving by user/admin/root
I can think of a couple ways to bypass this. First, while the file may be locked, it'd still be possible to rename the directory it's in and replace it with a near-duplicate (just missing the "locked" file). To prevent this, you'd need to lock at least every other directory on its path... and locking / or any of the top-level folders under it would likely cause trouble. Second, I'd think a kernel extension would be able to bypass the part of the filesystem that enforces the schg flag, and root can load extensions.
Mar
9
comment How does disk utility work while the system is live? (e.g. partitioning/resizing the OSes partition)
Nope, it works fine when booted from the volume you're resizing. The reason you get an error in recovery mode is that in that case you're running from a hidden volume right after the main volume, and resizing the main volume requires that the recovery volume be moved. Resizing the current startup volume is supported, but moving it is not. That's why it fails in recovery mode but works when started normally.
Mar
7
comment All downloaded files cannot be opened as they are 'damaged and should be moved to the Trash'
To get more information about the problem, open the Console utility and report any messages that appear as you try to open files. Also, open the Terminal utility, enter the command "spctl --assess -vv " (including the space at the end, but not the quotes around it), then drag a downloaded file from the Finder into the Terminal window (this'll paste in the file's path), then reselect the Terminal window and press return. Let us know what it prints.
Mar
7
comment All downloaded files cannot be opened as they are 'damaged and should be moved to the Trash'
Since it's happening on all files, it's not the same problem described for JOSM.app. On the other hand, it's possible there's a problem with the system's security policy database, and switching gatekeeper off & back on might rebuild the relevant part of that...
Mar
4
comment How do I access the Volumes directory in Macintosh HD?
@skywalker sudo cd will never work -- the sudo command runs cd as a subprocess, that subprocess changes directory to wherever you told it... and then exits, leaving the parent process (your shell) in the same place it was to begin with.
Feb
27
revised Does a `.hidden` configuration file for Finder exist?
Added notes on seeing the hidden flag
Feb
26
answered Does a `.hidden` configuration file for Finder exist?
Feb
24
awarded  Enlightened
Feb
24
awarded  Nice Answer
Feb
20
comment When did the colon character : become an allowed character in the filesystem?
I don't see an error there; it'll actually be stored as "/" on the physical disk, translated into ":" in the filesystem driver (part of the kernel), then translated back to "/" for the MacOS-heritage APIs. So on an HFS+ volume, it's "truly" a "/".
Feb
19
comment When did the colon character : become an allowed character in the filesystem?
":" is allowed in unix-heritage APIs (and "/" used as a path delimiter), while "/" is allowed in MacOS-heritige APIs (and ":" used as a delimiter), and the two are swapped as needed depending on context -- see this previous question and the linked usenix paper.
Feb
16
comment How do I really (dig) flush the DNS cache on OS X 10.9?
dig bypasses the OS resolver (and hence cache), so this isn't telling you anything about whether it's been flushed or not. What it is telling you about is caching at your DNS server, and you cannot flush that from the client.
Feb
11
comment Any idea why the pkg process in OS X Yosemite (10.10.2) would replace the Markup.appex plug-in Preview?
It's not clear to me that Markup.appex itself was actually changed -- pkd may have simply decided to refresh its info about Markup.appex (by deleting and recreating its info -- not the actual Markup.appex file).
Feb
11
answered Yosemite Retail DVD?
Feb
8
answered Applescript and Shell: how do I insert a variable?