A comprehensive list of ACL attributes is available by consulting the man pages:
If you prefer a GUI app to show man pages download and install e.g. ManOpen (free) or Dash for macOS (a few $$).
I won't list the whole documentation of chmod:
ACL MANIPULATION OPTIONS
ACLs are manipulated using extensions to the symbolic mode grammar. Each
I had what appeared to be the EXACT same problem. The issue was with the system immutable flag on CrashPlan.app in my .MobileBackups folder.
Actually, it was an old .MobileBackups folder from a Previous System folder that was created during an "Archive and Install" of OS X, so I knew it was nothing I needed. It was completely inactive, but I couldn't delete ...
The CrashPlan.app does not have an ACL. The output of ls is consistent, you must have misread it.
When you run ls -a in the parent directory, it tells you that . (i.e. the parent of CrashPlan.app) has extended attributes, and that CrashPlan.app has no ACL (mode string rwxrwxr-x).
When you run ls -a inside CrashPlan.app, it tells you that . (i.e. the ...
The proper command to remove the ACE from the folder in SIP-disabled mode is:
sudo chmod -a "everyone deny delete" /Applications
You can also remove (or add) ACL entries by number/index:
sudo chmod -a# 0 /Applications
There are access control lists in addition to the typical permissions that lock you out of the time machine destination and prevent this. You might succeed in disabling that when Time Machine isn't looking, but when it starts up, it will likely notice you messed with the files it wrote and mark that destination as read only and never back up again to that ...
After quite a tedious research it seems that there is no easy way to edit the description of the private key, so basically unless Apple enhances their Keychain Access application there is no way to distinguish between multiple digital IDs imported into the same key chain.
It also looks like Google Chrome (and Chromium) have implemented some key management ...
Figured it out. I had originally created a group called Dev and then immediately renamed it to Duo through Users & Groups in System Preferences. But appparently this only makes a cosmetic change in the gui. I don't know if this is an expected behaviour by design or a bug on macOS Mojave 10.14.6 ...
To reproduce it:
Open System Preferences > Users &...
Full Disk Access
You're stuck at the following:
sudo ls /Volumes/BrainDump-Chris/Backups.backupdb/MyMac/Latest/Macintosh\ HD/Users/me
Operation not permitted
You need to give iTerm2 (or whatever terminal emulator you use) Full Disk Access permission.
Fixing File Permissions
Ok, now you've copied over some files, but you can't modify them. This is ...
Try to ssh into one machine and use cp -avi -p. -i = interactive, -p = preserve directory attributes , -v = verbose. I almost always use cp -avi which preservers structures and attributes of files being copied , with the exception of directory attributes. From man cp
-p: Cause cp to preserve the following attributes of each source
file in the copy: ...
Hi David and Igor — Issue is resolved, but the solution is not something I'd have considered as even being a relevant one, but I wanted to post it here for whoever this might help in the future (as well as put closure to Igor's / Dave's possible curiosity. And once again, thank you guys for all your suggestions.
For a completely different (separate) reason, ...
First, of all you do not need 4 cycles. To enable SIP, you can enter the command below, then restart the Mac.
You should get the message shown below.
Successfully cleared System Integrity Protection. Please restart the machine for the changes to take effect.
You can disable SIP on a single restart, if you install rEFInd. If properly ...
Well, macos support acl's too.
1) I'm not understanding this list too well. Why does SCAN_000275.pdf show up owned by scanaccount? The user seems to be jstarek. I'd expect ., .DS_STORE, ...
An erroneous extended attribute has been applied to this directory somehow, but it can only be removed using the xattr Terminal command. You should take a look at a brief explanation here. A more detailed question and answer can be found at this StackOverflow page.
After some trial and error, I discovered that Quartz Composer has a problem with directories that have a Spotlight-related entry in their Access Control List (ACL).
Using Terminal, you can see if a directory has a Spotlight ACL entry with ls -dle and looking for output that contains a _spotlight entry, e.g.:
$ ls -dle ~/Documents
drwx------+ 303 userx ...
EDIT: The following is a partial solution. It will work at the shell level as expected but in Finder it can be bypassed with the if user is admin or knows the a admin user id & password. See comments below...
Check the man page on chmod and you will find...
The following permissions are applicable to directories:
list List entries.
This appears to do the trick:
sudo chmod -R +a "user:UserTwo allow list,add_file,search,delete,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,readsecurity,file_inherit,directory_inherit" ./
sudo chmod -R +a "user:UserOne allow list,add_file,search,delete,add_subdirectory,delete_child,readattr,writeattr,...
I would try to avoid ACL's: they are tricky and often behave unexpectedly.
If I were you, I would try stick to standard UNIX permission, following these guidelines:
Create a user group (say, MeAndWife)
Make sure users Me and Wife are the ones and only members of MeAndWife
Change group ownership of sub directory to MeAndWife by something like chgrp -hR ...
I almost ran this script after i replaced my system drive with an SSD and my new user uid was different to the old one (wonder what happened if you ever did run it?).
In the end i found http://pondini.org/TM/B6.html (again) and the "tmutil associatedisk" tips seems to have worked for me (on Mac OS 10.7.5) - fingers crossed!