1 2 Previous Next 15 Replies Latest reply: Aug 24, 2012 2:27 PM by MooneyPilot
MooneyPilot Level 1 Level 1 (10 points)

I keep getting the following sorts of my messages in Console since upgrading to Mountain Lion. There are no extended attributes on my keychain file:

 

7/26/12 8:57:28.994 PM sandboxd[1105]: ([1104]) mdworker(1104) deny file-write-create /Users/.../Library/Keychains/login.keychain.sb-d2db7c29-UF92kb

7/26/12 8:57:28.998 PM sandboxd[1105]: ([1104]) mdworker(1104) deny file-write-create /Users/.../Library/Keychains/login.keychain.sb-d2db7c29-hbI4Z4

7/26/12 8:57:29.002 PM sandboxd[1105]: ([1104]) mdworker(1104) deny file-write-create /Users/.../Library/Keychains/login.keychain.sb-d2db7c29-h77cGx

7/26/12 8:57:29.006 PM sandboxd[1105]: ([1104]) mdworker(1104) deny file-write-create /Users/.../Library/Keychains/login.keychain.sb-d2db7c29-gR9ZsJ

7/26/12 8:57:29.009 PM sandboxd[1105]: ([1104]) mdworker(1104) deny file-write-create /Users/.../Library/Keychains/login.keychain.sb-d2db7c29-oTzZNT

7/26/12 8:57:29.013 PM sandboxd[1105]: ([1104]) mdworker(1104) deny file-write-create /Users/.../Library/Keychains/login.keychain.sb-d2db7c29-sTLdKl

 

These messages get logged every few minutes in console.

 

I've also seen that my login.keychain file has a com.apple.quarantine flag on it when I perform an ls -lae@ listing of ~/Library/Keychains/ in terminal.

 

I have tried repairing permissions and used the resetpassword command in recovery disk to restore default user preferences and ACLs.

 

I've never noticed the extended attributes on this before. I tried removing the quarantine flag using the xattr command, but the flag comes back after a bit. I've also repaired my login.keychain file, but no errors were found.

 

Is anyone else having these sorts of messages with Mountain Lion? Any ideas on a fix to get this to stop.

 

Thanks in advance,

 

Norm


MacBook Pro with Retina display, OS X Mountain Lion
  • 1. Re: sandboxd messages in console related to mdworker
    swerty Level 1 Level 1 (10 points)

    I have the same problem, but it also prevents my MBA 2010 from sleep!

    Unfortunatelly, I dont understand half of your post and I dont have an answer

    somebody please help us!

  • 2. Re: sandboxd messages in console related to mdworker
    softwater Level 5 Level 5 (5,370 points)

    Have you got the hidden User Library in 'Favorites' in Finder's sidebar, by any chance, or have you used the chflags command to make that library unhidden?

  • 3. Re: sandboxd messages in console related to mdworker
    swerty Level 1 Level 1 (10 points)

    nope and nope. I use option key+ click on GO in finder when i need to access the Library folder..

  • 4. Re: sandboxd messages in console related to mdworker
    Redarm Level 4 Level 4 (2,580 points)

    I've also seen that my login.keychain file has a com.apple.quarantine flag on it when I perform an ls -lae@ listing of ~/Library/Keychains/ in terminal.

    I also have the extended attr. but no problems with sandboxing and Console messages.

  • 5. Re: sandboxd messages in console related to mdworker
    MooneyPilot Level 1 Level 1 (10 points)

    Hi,

     

    I do have the Library showing. Let me try reversing that step and see what happens.

     

    Thanks,

     

    Norm

  • 6. Re: sandboxd messages in console related to mdworker
    MooneyPilot Level 1 Level 1 (10 points)

    Reversed Library visibility. Took it out of my Finder sidebar. Still having the same console messages.

     

    Norm

  • 7. Re: sandboxd messages in console related to mdworker
    softwater Level 5 Level 5 (5,370 points)

    There may be a more elegant solution than this, but let me tell you what worked for me.

     

    That sandbox message tells us that Spotlight is trying to search your ~/Library folder, but since Spotlight doesn't have permission to do so, sandbox prevents it from succeeding. Sandbox stops Spotlight from succeeding, but it doesn't stop it from trying. Hence, you see the repeated messages and mds worker keeps plugging away.

     

    The way I stopped it was to make that folder visible by using this command in Terminal:

     

    chflags nohidden ~/Library

     

    Then, open System Preferences > Spotlight | Privacy

     

    Open a Finder window and navigate to ~/Library. Drag it into the Privacy pane.

     

    Go back to Terminal and do

     

    chflags hidden ~/Library

     

    Technically, if the folder is hidden with chflags Spotlight should ignore it automatically, but clearly for some of us this isn't working. Maybe its a bug in ML, I don't know, but the above solution worked in my case. Give it a try and report back.

  • 8. Re: sandboxd messages in console related to mdworker
    Ponzi Level 1 Level 1 (15 points)

    Adding the Library folder to the Spotlight privacy pane didn't work for me. Still getting the repeated messages in the Console.

  • 9. Re: sandboxd messages in console related to mdworker
    softwater Level 5 Level 5 (5,370 points)

    Yes, unfortunately I found these messages again about 24hours later.

     

    Back to the drawing board on this one, I'm afraid.

  • 10. Re: sandboxd messages in console related to mdworker
    MooneyPilot Level 1 Level 1 (10 points)

    Yes. Same issue here. I also tried putting just the user keychain folder into the privacy pain, also with no change in logging of sandboxd keychain items.

     

    Thanks though,

     

    Norm

  • 11. Re: sandboxd messages in console related to mdworker
    softwater Level 5 Level 5 (5,370 points)

    What's strange is I'm seeing far fewer of these now than I was before. A couple then none for 2hrs or so, then a couple more, and then none... and so on.

     

    That's vastly different from a few days ago, when this seemed to be polling almost all the time.

     

    In any case, there is another solution that I can think of, but not one I've implemented myself because I use Spotlight so much, but that is to simply turn Spotlight off. If Spotlight's not important to you or you want to have a go, open Terminal.app and paste this command into the Terminal window:

     

    sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.metadata.mds.plist

     

    Press 'return' and enter you admin password (it will not echo to the screen, so type carefully.

     

     

    To undo this command and re-enable Spotlight, use

     

    sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.metadata.mds.plist

  • 12. Re: sandboxd messages in console related to mdworker
    swerty Level 1 Level 1 (10 points)

    excluding the Library folder, or the Keychain folder did not work for me either.. After that I also cleared caches, rebuilt Spotlight index and restarted the machine.. and nothing changed.

     

    there is a pattern- every 3 or 4 minutes i get first sandboxd message:

     

    Aug  7 19:43:14 xxx sandboxd[7516] ([7515]): mdworker(7515) deny file-write-create /Users/swerty/Library/Keychains/login.keychain.sb-dc6a0053-g0C3Wp

     

    then always followed by:

     

    Aug  7 19:43:14 xxx kernel[0]: Sandbox: sandboxd(7516) deny mach-lookup com.apple.coresymbolicationd

     

    and ending with 11 same messages:

     

    Aug  7 19:43:14 xxx sandboxd[7516] ([7515]): mdworker(7515) deny file-write-create /Users/swerty/Library/Keychains/login.keychain.sb-dc6a0053-RBT6gE

    Aug  7 19:43:14 xxx sandboxd[7516] ([7515]): mdworker(7515) deny file-write-create /Users/swerty/Library/Keychains/login.keychain.sb-dc6a0053-ri0Qb6

    Aug  7 19:43:14 xxx sandboxd[7516] ([7515]): mdworker(7515) deny file-write-create /Users/swerty/Library/Keychains/login.keychain.sb-dc6a0053-N3FgDJ

    Aug  7 19:43:14 xxx sandboxd[7516] ([7515]): mdworker(7515) deny file-write-create /Users/swerty/Library/Keychains/login.keychain.sb-dc6a0053-nAPG8V

    Aug  7 19:43:14 xxx sandboxd[7516] ([7515]): mdworker(7515) deny file-write-create /Users/swerty/Library/Keychains/login.keychain.sb-dc6a0053-1I6eIF

    Aug  7 19:43:15 xxx sandboxd[7516] ([7515]): mdworker(7515) deny file-write-create /Users/swerty/Library/Keychains/login.keychain.sb-dc6a0053-MO6UcN

    Aug  7 19:43:15 xxx sandboxd[7516] ([7515]): mdworker(7515) deny file-write-create /Users/swerty/Library/Keychains/login.keychain.sb-dc6a0053-pWMKSb

    Aug  7 19:43:15 xxx sandboxd[7516] ([7515]): mdworker(7515) deny file-write-create /Users/swerty/Library/Keychains/login.keychain.sb-dc6a0053-oWhURV

    Aug  7 19:43:15 xxx sandboxd[7516] ([7515]): mdworker(7515) deny file-write-create /Users/swerty/Library/Keychains/login.keychain.sb-dc6a0053-A9TVRN

    Aug  7 19:43:15 xxx sandboxd[7516] ([7515]): mdworker(7515) deny file-write-create /Users/swerty/Library/Keychains/login.keychain.sb-dc6a0053-gHL7v9

    Aug  7 19:43:15 xxx sandboxd[7516] ([7515]): mdworker(7515) deny file-write-create /Users/swerty/Library/Keychains/login.keychain.sb-dc6a0053-b5zZgU

    (xxx is our domain edited out)

     

    followed by several "bootpd[4636]: service time 0.000006 seconds " messages.

     

     

    I really dont want to disable Spotlight:/

  • 13. Re: sandboxd messages in console related to mdworker
    Ponzi Level 1 Level 1 (15 points)

    This issue seems to have cleared up for me in yesterday's update to 10.8.1. Those repeated console messages are gone.

  • 14. Re: sandboxd messages in console related to mdworker
    swerty Level 1 Level 1 (10 points)

    Yep, I've just checked, all gone! perfect!:)

1 2 Previous Next