You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

All contents of /Applications restricted by SIP

I'm running Big Sur 11.6. Since ~3 weeks ago I can't update/delete/install any apps. As per /System/Library/Sandbox/rootless.conf, in the /Applications folder only the Safari app should be restricted:


mac$ grep -i "\s+/applications" /System/Library/Sandbox/rootless.conf 
				/Applications/Safari.app
mac$ 


but the "ls -laO" shows everything in /Applications is restricted (showing only an excerpt of the output):


mac$ pwd
/Applications
mac$ ls -lnO
total 280
drwxr-xr-x   3 501  20  restricted         96 May 10 13:14 Atom.app
drwxr-xr-x@  3 501  80  restricted         96 Sep 17 14:57 Brave Browser.app
drwxr-xr-x   3 501  80  restricted         96 Sep 21  2020 MacVim.app
drwxr-xr-x@  3 501  20  restricted         96 Sep 16 21:51 Opera.app
drwxr-xr-x@ 10 0    0   restricted        320 Jun 29 10:59 Python 3.9
drwxr-xr-x@  3 0    0   restricted         96 Oct  4 09:23 Safari.app


Does this SIP status of all apps in the /Application folder explain why I can't delete/update/install any application? Another symptom is that the "Move to bin" option doesn't even show up in the pop-up menu when I right-click on anything in the /Application folder.


If anyone has ran into a similar issue and managed to resolve it, I'd really like to hear your experience. :)


thanks!

/Aleksandar

Posted on Oct 13, 2021 8:45 AM

Reply

Similar questions

6 replies

Oct 15, 2021 7:11 AM in response to aleksandarfrommadrid

aleksandarfrommadrid wrote:

I can't update/delete/install any apps.

Thank you for the tip! Oddly enough, my ~/Applications folder is empty, all the apps are still installed into the /Applications folder. Should my apps have been moved to ~/Applications when I have upgraded to Catalina and/or BigSur? How can I make ~/Applications folder the target for any new app installation?


I see now accessing the user Applications folder acts as an 'alias' and reads MacIntosh HD/Applications.

So I am afraid no help there.





The two Volume read only System files was introduced with macOS Catalina....

ref: About the read-only system volume in macOS Catalina - Apple ...

https://support.apple.com/en-us/HT210650


Can you verify your user:

whoami


Your user would have admin privileges , this you can see:

ls -la /Users


drwxr-xr-x 6 root admin 192 Jan 1 2020 .

drwxr-xr-x 20 root wheel 640 Jan 1 2020 ..

-rw-r--r-- 1 root wheel 0 Jan 1 2020 .localized

drwxr-xr-x+ 3 Guest _guest 96 Oct 24 2020 Guest

drwxrwxrwt 42 root wheel 1344 Sep 13 16:07 Shared

drwxr-xr-x+ 81 <YourUserName> staff 2592 Oct 15 07:01 <YourUserName>



So I am unclear exactly the issue... " I can't update/delete/install any apps. "

We do know you can not deleted baked in applications in the macOS....(?) But "any" apps seems quite different issue.



https://support.apple.com/guide/mac-help/open-a-mac-app-from-an-unidentified-developer-mh40616/11.0/mac/11.0


Install and uninstall apps from the internet or disc on Mac


Change Privacy preferences on Mac - Apple Support


Oct 14, 2021 10:45 AM in response to aleksandarfrommadrid

aleksandarfrommadrid wrote:

I'm running Big Sur 11.6. Since ~3 weeks ago I can't update/delete/install any apps. As per /System/Library/Sandbox/rootless.conf, in the /Applications folder only the Safari app should be restricted:

mac$ grep -i "\s+/applications" /System/Library/Sandbox/rootless.conf 
/Applications/Safari.app

Does this SIP status of all apps in the /Application folder explain why I can't delete/update/install any application? Another symptom is that the "Move to bin" option doesn't even show up in the pop-up menu when I right-click on anything in the /Application folder.

If anyone has ran into a similar issue and managed to resolve it, I'd really like to hear your experience. :)

thanks!
/Aleksandar


Your Applications in your User/Home folder: ~/Applications


Finder>Shift Command A


Open a Mac app from an unidentified developer - Apple Support


Safely open apps on your Mac - Apple Support



You do not have r/w access to System files since macOS Catalina

ref: About the read-only system volume in macOS Catalina - Apple ...

https://support.apple.com/en-us/HT210650


Oct 15, 2021 7:47 AM in response to leroydouglas

Thanks for staying with me on this! :)


First the whoami and a snapshot of various owner/group combinations in the /Application folder:


mac$ whoami
<me>
mac$ ls -la /Users/
total 0
drwxr-xr-x    5 root      admin   160 Oct  5 11:04 .
drwxr-xr-x   20 root      wheel   640 Jan  1  2020 ..
-rw-r--r--    1 root      wheel     0 Jan  1  2020 .localized
drwxrwxrwt   19 root      wheel   608 Oct  5 11:03 Shared
drwxr-xr-x+ 121 <me>      staff  3872 Oct 14 19:00 <me>
mac$ 
mac$ cd /Applications/
mac$ ls -la
total 280
drwxrwxr-x  101 root      admin   3232 Oct 15 14:33 .
drwxr-xr-x   20 root      wheel    640 Jan  1  2020 ..
-rw-r--r--@   1 root      wheel  10244 Oct 11 17:27 .DS_Store
-rw-r--r--    1 root      wheel      0 Jan  1  2020 .localized
drwxrwxr-x    3 root      wheel     96 Sep 16 17:26 Adobe Acrobat Reader DC.app
drwxr-xr-x@   3 root      admin     96 Sep 17 16:38 App Cleaner 7.app
drwxr-xr-x    3 <me>      staff     96 May 10 13:14 Atom.app
drwxrwxr-x    3 <me>      staff     96 Jun 14 17:33 BBEdit.app
drwxr-xr-x@   3 502       wheel     96 Aug 24 00:11 Backup and Sync.app
drwxr-xr-x@   3 root      wheel     96 Nov 27  2020 Blackmagic Disk Speed Test.app
drwxr-xr-x    2 root      admin     64 Sep 23 10:47 Box Sync.app
drwxr-xr-x@   3 <me>      admin     96 Sep 17 14:57 Brave Browser.app
drwxr-xr-x    3 <me>      staff     96 Sep  8 14:16 Evernote.app
mac$ 


I hope I can explain the problem better with this example: when an app (say Brave Browser) prompts me whether I want to upgrade and I accept, the upgrade fails at the very last leg with a message "Failed to perform authorized file move for Brave Browser.app".


The same happens when I try to install any app from a .pkg binary. When I try to install a new app from .dmg binary, move of the app icon to /Application folder fails.


Oct 15, 2021 8:00 AM in response to aleksandarfrommadrid

I don't know if it is possible to tell the difference between /Applications and /System/Volumes/Data/Applications.

Apps in the former should only be Apple's apps bundled with the OS, but I believe some third-party apps snuck in when Catalina went Read-only OS volume. Those are pretty much stuck unless you boot into Recovery or another boot drive and remove them from /Applications. Reinstalling them should put them in the Data volume Applications folder where you can update or remove them.

All contents of /Applications restricted by SIP

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.