Hot answers tagged

6

A comprehensive list of ACL attributes is available by consulting the man pages: man chmod If you prefer a GUI app to show man pages download and install e.g. ManOpen (free) or Dash for macOS (a few $$). I won't list the whole documentation of chmod: ... ACL MANIPULATION OPTIONS ACLs are manipulated using extensions to the symbolic mode grammar. Each ...


3

fire up Terminal and check the file ls -leO (that's a capital O not a zero) and if the uappnd flag is set, try chflags nouappnd a.single.jpg


2

I had what appeared to be the EXACT same problem. The issue was with the system immutable flag on CrashPlan.app in my .MobileBackups folder. Actually, it was an old .MobileBackups folder from a Previous System folder that was created during an "Archive and Install" of OS X, so I knew it was nothing I needed. It was completely inactive, but I couldn't delete ...


2

The CrashPlan.app does not have an ACL. The output of ls is consistent, you must have misread it. When you run ls -a in the parent directory, it tells you that . (i.e. the parent of CrashPlan.app) has extended attributes, and that CrashPlan.app has no ACL (mode string rwxrwxr-x). When you run ls -a inside CrashPlan.app, it tells you that . (i.e. the ...


2

It would be better to use the ditto command since it is aware of resource forks, HFS attributes as well as ACL. You can alias it or just rewitpre your brain to use ditto as best fits your workflow.


2

The proper command to remove the ACE from the folder in SIP-disabled mode is: sudo chmod -a "everyone deny delete" /Applications You can also remove (or add) ACL entries by number/index: sudo chmod -a# 0 /Applications


2

There are access control lists in addition to the typical permissions that lock you out of the time machine destination and prevent this. You might succeed in disabling that when Time Machine isn't looking, but when it starts up, it will likely notice you messed with the files it wrote and mark that destination as read only and never back up again to that ...


2

After quite a tedious research it seems that there is no easy way to edit the description of the private key, so basically unless Apple enhances their Keychain Access application there is no way to distinguish between multiple digital IDs imported into the same key chain. It also looks like Google Chrome (and Chromium) have implemented some key management ...


2

Figured it out. I had originally created a group called Dev and then immediately renamed it to Duo through Users & Groups in System Preferences. But appparently this only makes a cosmetic change in the gui. I don't know if this is an expected behaviour by design or a bug on macOS Mojave 10.14.6 ... To reproduce it: Open System Preferences > Users &...


1

Full Disk Access You're stuck at the following: sudo ls /Volumes/BrainDump-Chris/Backups.backupdb/MyMac/Latest/Macintosh\ HD/Users/me Operation not permitted You need to give iTerm2 (or whatever terminal emulator you use) Full Disk Access permission. Fixing File Permissions Ok, now you've copied over some files, but you can't modify them. This is ...


1

rsync can do this. I've installed rsync 3.1.3 via MacPorts at both ends, run one end as a daemon, and used -aX as flags.


1

Try to ssh into one machine and use cp -avi -p. -i = interactive, -p = preserve directory attributes , -v = verbose. I almost always use cp -avi which preservers structures and attributes of files being copied , with the exception of directory attributes. From man cp -p: Cause cp to preserve the following attributes of each source file in the copy: ...


1

Hi David and Igor — Issue is resolved, but the solution is not something I'd have considered as even being a relevant one, but I wanted to post it here for whoever this might help in the future (as well as put closure to Igor's / Dave's possible curiosity. And once again, thank you guys for all your suggestions. For a completely different (separate) reason, ...


1

First, of all you do not need 4 cycles. To enable SIP, you can enter the command below, then restart the Mac. csrutil clear You should get the message shown below. Successfully cleared System Integrity Protection. Please restart the machine for the changes to take effect. You can disable SIP on a single restart, if you install rEFInd. If properly ...


1

Well, macos support acl's too. http://ahaack.net/technology/OS-X-Access-Control-Lists-ACL.html https://www.techrepublic.com/blog/apple-in-the-enterprise/introduction-to-os-x-access-control-lists-acls/ 1) I'm not understanding this list too well. Why does SCAN_000275.pdf show up owned by scanaccount? The user seems to be jstarek. I'd expect ., .DS_STORE, ...


1

An erroneous extended attribute has been applied to this directory somehow, but it can only be removed using the xattr Terminal command. You should take a look at a brief explanation here. A more detailed question and answer can be found at this StackOverflow page.


1

After some trial and error, I discovered that Quartz Composer has a problem with directories that have a Spotlight-related entry in their Access Control List (ACL). Using Terminal, you can see if a directory has a Spotlight ACL entry with ls -dle and looking for output that contains a _spotlight entry, e.g.: $ ls -dle ~/Documents drwx------+ 303 userx ...


1

EDIT: The following is a partial solution. It will work at the shell level as expected but in Finder it can be bypassed with the if user is admin or knows the a admin user id & password. See comments below... Check the man page on chmod and you will find... The following permissions are applicable to directories: list List entries. ...


1

This appears to do the trick: cd /Users/UserTwo sudo chmod -R +a "user:UserTwo allow list,add_file,search,delete,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,readsecurity,file_inherit,directory_inherit" ./ sudo chmod -R +a "user:UserOne allow list,add_file,search,delete,add_subdirectory,delete_child,readattr,writeattr,...


1

mv uses cp when moving files between different volumes, and it looks like the -p option isn't used, so ACL aren't preserved. However if moved in the same volume ACLs are of course preserved.


1

I would try to avoid ACL's: they are tricky and often behave unexpectedly. If I were you, I would try stick to standard UNIX permission, following these guidelines: Create a user group (say, MeAndWife) Make sure users Me and Wife are the ones and only members of MeAndWife Change group ownership of sub directory to MeAndWife by something like chgrp -hR ...


1

I almost ran this script after i replaced my system drive with an SSD and my new user uid was different to the old one (wonder what happened if you ever did run it?). In the end i found http://pondini.org/TM/B6.html (again) and the "tmutil associatedisk" tips seems to have worked for me (on Mac OS 10.7.5) - fingers crossed!


Only top voted, non community-wiki answers of a minimum length are eligible