I stupidly used my terminal to create a symbolic link typing this:

sudo ln -s /bin/tcsh tcsh

And now I need to delete it. I tried

sudo rm tcsh

but when I authenticate it tells me:

override rwxr-xr-x root/wheel restricted,compressed for tcsh?

and even if I type y and press enter it tells me:

rm: tcsh: Operation not permitted.

Is there anything I can do to fix this?

  • What is the current directory when you issue sudo rm tcsh command? What was the current directory when you executed sudo ln -s /bin/tcsh tcsh?
    – techraf
    Commented Dec 22, 2016 at 2:15
  • Sorry, I hadn't seen this (totally new to the site). Good question, I want to say that I was under /users/myusername but if I type ls -l tcsh it tells me that there is nothing with that name...is there a way for me to find out?
    – user216334
    Commented Dec 22, 2016 at 2:41
  • sudo find / -name tcsh -type l 2> /dev/null
    – techraf
    Commented Dec 22, 2016 at 2:44
  • it says -type 1: unknown type
    – user216334
    Commented Dec 22, 2016 at 2:48
  • Ooops...sorry, this is very new to me:) What kind of output should i get?
    – user216334
    Commented Dec 22, 2016 at 2:51

1 Answer 1


It seems you are either trying to remove your original file /bin/tcsh or another tcsh copied to a different path. You can't link /bin/tcsh to tcsh if you are in the /bin folder because that's forbidden.

A soft link of tcsh usually isn't protected by SIP and you have to search for it and delete it. If you somehow managed to copy tcsh to another path, which then prevents a software you are using from working, you may have to delete it there.

To remove a protected tcsh copy, boot to Recovery Mode, disable SIP, reboot to your main volume and remove the link.

  1. Reboot your Mac into Recovery Mode by restarting your computer and holding down Command+R until the Apple logo appears on your screen.
  2. Click Utilities > Terminal.
  3. In the Terminal window, type in csrutil disable and press Enter.
  4. Restart your Mac.
  5. Remove the tcsh copy
  6. Reboot your Mac into Recovery Mode
  7. Click Utilities > Terminal.
  8. In the Terminal window, type in csrutil enable and press Enter.
  9. Restart your Mac.

Link: How do I disable System Integrity Protection (SIP) AKA “rootless” on OS X 10.11, El Capitan? This is also valid for macOS Sierra!

  • Thanks for answering! Just to make sure I don't screw this up more than I already did: when I try to remove the link, sudo rm tcsh should work, right?
    – user216334
    Commented Dec 22, 2016 at 1:36
  • Ok. I hope I'm not abusing of your patience, but I have one more question: to be 100% sure that I am removing the link and not the original file i type man rm tcsh? Thank you, thank you, thank you.
    – user216334
    Commented Dec 22, 2016 at 1:47
  • I see. I am using El Capitan, as well. It says -rwxr-xr-x 1 root wheel, which I assume means this is the actual executable file. Which begs the question: how do I find the link? I know it's somewhere, and it's preventing a software I use from working...
    – user216334
    Commented Dec 22, 2016 at 2:16
  • Would updating to Sierra solve my problem?
    – user216334
    Commented Dec 22, 2016 at 2:18
  • @techraf You are right. I didn't check the error output: override rwxr-xr-x root/wheel restricted... properly and didn't realize the missing l...! I'm not surreal - I'm Vader and I will send my new VW Diesel Death Star if you call one of my answers surreal again!
    – klanomath
    Commented Dec 22, 2016 at 2:32

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .