Recover items in folders with red minus sign - Time Machine

Hi!

I have a backup in Time Machine from my last system working system. Since the machine got blocked with an authentication code, and I proved I was the original owner; then got the machine unlocked by Apple which say to not recover system things from any backup, because can bring back the problem.


I didn't loose a extremely important data, but I'm trying to search my Music Library curated for over 10 years... I can access the encrypted drive and to the snapshots but all music folders are with a red sing and they are empty.


There's a way to get over there?

Can anyone help on this?


Thank you

MacBook Pro 16″, macOS 13.1

Posted on Jan 18, 2023 12:52 PM

Reply
Question marked as Top-ranking reply

Posted on Jan 19, 2023 6:36 AM

The red minus signs indicate a file permissions issue. You can change the ownership of the files using Terminal.


Something like this:


sudo chown -R user:staff /Volumes/<your timemachine drive>/<backup>/Users/<username>/Music


Where user:staff equals your current username:staff and you insert the correct full path to the Music folder.


The command will change the ownership to your current user and do so recursively down through all the files within the Music folder. Then those red minus indicators should disappear.


You could also apply the ownership to /Users/<username> and that will do your entire home directory but it will likely take a lot longer to complete than the Music folder alone.

Similar questions

6 replies
Question marked as Top-ranking reply

Jan 19, 2023 6:36 AM in response to Abel Piñate

The red minus signs indicate a file permissions issue. You can change the ownership of the files using Terminal.


Something like this:


sudo chown -R user:staff /Volumes/<your timemachine drive>/<backup>/Users/<username>/Music


Where user:staff equals your current username:staff and you insert the correct full path to the Music folder.


The command will change the ownership to your current user and do so recursively down through all the files within the Music folder. Then those red minus indicators should disappear.


You could also apply the ownership to /Users/<username> and that will do your entire home directory but it will likely take a lot longer to complete than the Music folder alone.

Jan 20, 2023 7:15 AM in response to Abel Piñate

Why don't you use the TM app and navigate to that location to pull the data you want? I don't believe you should be using the Finder or the Terminal to navigate a TM backup due to how TM links the files for the backups.


If you still see the files/folders locked with the red dash, then create another macOS user account and try again.


I would not make any permissions changes to the TM backup itself as you risk corrupting the backup.


If you insist on continuing the current method to access the files, then use the third party app Carbon Copy Cloner to navigate to that location since it will ask for admin privileges which will allow it to see any file regardless of the permissions. You can also just copy that locked folder to your home folder which should automatically change the permissions to your current user (you will be prompted for your admin password). Or if you are navigating with the command line, then elevate yourself to root with:

sudo  su  -

Jan 19, 2023 3:25 PM in response to Abel Piñate

For reference:


sudo chown -R user:staff


Means:


Super User Do Change Owner Recursively with this specific username and group. Where user is replaced with your username. The -R is recursive from this folder and all items within that folder and all sub-folders and files.


The sudo will prompt for your user password.


Copying from Time Machine to local disk is required because Time Machine files are read only (my mistake in the first suggestion). In this example, the username must have varied or if the same username as the backup, the UID number for the user accounts didn't match. Every user has a unique UID number. The first admin user created on a Mac is always UID: 501 and the next user would be 502, etc.

Jan 19, 2023 7:17 AM in response to James Brickley

Hi! Thank you very much!


I did what you say and got this:

chown: /Volumes/.timemachine/erased-by-me/2023-01-03-153507.backup/2023-01-03-153507.backup/HD - Data/Users/myuser/Music: Read-only file system


I can see via terminal, inside the folder exist some files, but the red mark remains and going inside shows me a blank folder. In the info, actually says zero kb.


Thank you again.


EDIT: I tried and could copy the Music folder from the external HD to the computer and I could see transferred 400mb (the actual size I used to see) but still got the red mark and empty inside.

Jan 19, 2023 7:54 AM in response to James Brickley

Thank you James!!!


Before read you to try with sudo, I did as you say first in the local copy and I got all done. The mark is was gone and the files appeared. I guess the hard drive is part of the security of Time Machine, and I encrypted the disk.


What I did, its copy severals snapshots of Music to see which of them works.


Thank you very much!!! Appreciated!



(The command works for severals folders inside, for all those who will read this in the future, you can copy several folders in a principal one, and then do the command explained by James and all the folders inside will get unlocked)

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Recover items in folders with red minus sign - Time Machine

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.