macOS Ventura "Family" app persistent store service log entries (sandbox)

I think I fixed it (for me at least). So I use an app called Lulu, it is basically a firewall. Looking at the following post here I saw that someone put imagent as a firewall rule to allow all connections. I did that in Lulu, and now I don't seem to be getting the errors anymore.

So basically to put /System/Library/PrivateFrameworks/IMCore.framework/imagent.app as a rule to allow all connections. Go to settings > network > firewall > options. Click the + icon in the window that pops up and I finder window should pop up. Press command + shift + g and go to this path "System/Library/PrivateFrameworks/IMCore.framework/". In there should be the imagent.app, double press it. It should now be added in the window that popped up before. And just te make sure check if imagent.app is in there and it is set to allow all connections.

I hope this was helpful.

I'm seeing a similar issue on my new Mac Mini M2 Pro. This computer is near unusable and the "genius bar" at my local apple store was unable to find anything wrong. It constantly hangs up and won't fully shut down, frequently disconnects or fails to recognize keyboards and mice and the only faults I find are in the console as noted in the other entries. I'm running Ventura 13.3 and I can't find any app calling for a process "Family." The log entries are continuous and I'm really starting to regret buying this new Mac. Any more ideas?

Same issue.. might have a try to resolve for you that worked for me..

I have Xcode installed but rarely use it.

I'm on Ventura 13.3.1 (a) (22E772610a), though this started before this last critical update.

I recently let it update Xcode to Version 14.3 (14E222b)- and started getting a network (wifi) drop every minute or so, sometimes would be ok for a few minutes, but then back to on the dot - 60 seconds a brief outage (verified by PingPlotter and a constant ping to a few servers).

I tailed the console for a bit which got me here, seeing the family and NSXPCConnection errors.

The fix? Simply opening Xcode and accepting the license agreement and letting it go thru the final setup items (picking iOS or TV dev, etc). My assumption is that it needs to open up some permissions or change some sandbox/account settings.

Give it a whirl. Its been 35 mins for me now without any drop or log messages - where before it was constantly every minute.

Just formatted my Mac and reinstalled macOS and I still ran into sandbox violations. I dove deep, disabled SIP for dtruss. Noticed Family, imagent, and searchpartyuseragent consistently failing with com.apple.contactsd.persistence. Checked entitlements of these client apps, none explicitly allowed contactsd:persistence. Logs from syslog and dtruss confirmed contactsd blocking connections due to missing entitlements. Seems like a bug.

i have this problem on 13.1 and now 13.3 in ventura. I suspect it's due to xcode beta, but I can't diagnose it and I cant figure out what to do. It causes sporadic internet connection issues (opening a browser and typing an address and hitting enter incurs serious latency or will not connect at all).

I've turned off all icloud services, tried to disable all services, remove all apps, and remove all certificates & root CAs from my keyring, yet my console.log is full of sandbox violations all coming from apple services I cannot turn off:

error	09:37:04.693191-0400	tccd	bundleRecordWithBundleIdentifier failed for com.apple.protectedcloudstorage.protectedcloudkeysyncing: Error Domain=NSOSStatusErrorDomain Code=-10814 "kLSApplicationNotFoundErr: E.g. no application claims the file" UserInfo={_LSFunction=+[LSBundleRecord bundleRecordWithBundleIdentifier:allowPlaceholder:error:], _LSLine=158, NSUnderlyingError=0x12f610320 {Error Domain=NSOSStatusErrorDomain Code=-10814 "Unable to find this application extension record in the Launch Services database." UserInfo={NSDebugDescription=Unable to find this application extension record in the Launch Services database., _LSLine=699, _LSFunction=_LSPluginFindWithPlatformInfo}}}
error	09:37:00.210309-0400	kernel	1 duplicate report for Sandbox: Family(2364) deny(1) mach-lookup com.apple.contactsd.persistence
error	09:45:34.727057-0400	kernel	Sandbox: com.apple.WebKit.Networking(1307) deny(1) mach-lookup com.apple.diagnosticd

fault	09:37:07.003262-0400	contentlinkingd	Couldn't read values in CFPrefsPlistSource<0x141e11e70> (Domain: kCFPreferencesAnyApplication, User: kCFPreferencesAnyUser, ByHost: Yes, Container: (null), Contents Need Refresh: Yes): accessing these preferences requires user-preference-read or file-read-data sandbox access

error	09:37:07.383033-0400	Family	Persistent store service connection invalidated: failed at lookup with error 159 - Sandbox restriction

error	09:37:07.731635-0400	axassetsd	VoiceProvider: voice load failed for component <TTSSynthesisProviderComponentRecord: 0x127fa04a0> (null) (null) after 3 attempts.

I am receiving 12 errors from the process "Family" every three seconds. No idea where to begin to troubleshoot.

I have the same issue. Thousands of these in my logs for "Family" and "imagent"

error	11:50:38.084115-0400	imagent	Persistent store service connection invalidated: failed at lookup with error 159 - Sandbox restriction
error	11:50:38.084146-0400	imagent	Error communicating with persistent store service proxy: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.apple.contactsd.persistence was invalidated: failed at lookup with error 159 - Sandbox restriction." UserInfo={NSDebugDescription=The connection to service named com.apple.contactsd.persistence was invalidated: failed at lookup with error 159 - Sandbox restriction.}
error	11:50:38.084189-0400	imagent	Error connecting to remote endpoint: (null)
error	11:50:38.084228-0400	imagent	fault: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x7fa85961c460 -newEndpoint returned nil
fault	11:50:38.084271-0400	imagent	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x7fa85961c460 -newEndpoint returned nil
error	11:50:38.084336-0400	imagent	error: Failed to create NSXPCConnection
error	11:50:38.084513-0400	imagent	Persistent store service connection invalidated: failed at lookup with error 159 - Sandbox restriction
error	11:50:38.084603-0400	imagent	Error communicating with persistent store service proxy: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.apple.contactsd.persistence was invalidated: failed at lookup with error 159 - Sandbox restriction." UserInfo={NSDebugDescription=The connection to service named com.apple.contactsd.persistence was invalidated: failed at lookup with error 159 - Sandbox restriction.}
error	11:50:38.084638-0400	imagent	Error connecting to remote endpoint: (null)
error	11:50:38.084675-0400	imagent	fault: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x7fa85961c460 -newEndpoint returned nil
fault	11:50:38.084717-0400	imagent	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x7fa85961c460 -newEndpoint returned nil
error	11:50:38.084772-0400	imagent	error: Failed to create NSXPCConnection

Hey @TammyW_03

I just read your answer, and I am really surprised that you are suggesting the solution is to UnInstall the application, which is part of the operating system provided applications, launched by `launchd`.

Were you aware that this application is provided by Apple, and would still recommend this approach?

Hey Warloxk,

This is a great question. An App Sandbox is when an app is being restricted from gaining access to system resources and your user data. More details about this can be found on the Apple Developer site, here: App Sandbox | Apple Developer Documentation

To help narrow this down, these steps should help:

• Check your Applications folder for an app named "Family" and delete it, if found and you don't need it. Here's a guide on deleting apps, just in case: Uninstall apps on your Mac - Apple Support
• Check your Login Items to see if the app is listed there, and remove it. Login Items allow apps/tasks to start up automatically when you sign in to your user account. Here's more details, and how to remove them: Open items automatically when you log in on Mac - Apple Support

If you do locate the app and want to continue using it, you'll want to reach out to the app developer to look into these alerts more with you. Here's how to reach an app developer, just in case: How to contact an app developer - Apple Support

Let us know how it goes.

Take care!

I did factory reset few minutes ago, nothing is installed, yet!

I am getting 12GB Memory Used out of 16GB Physical Memory!!!

Nothing more than 200MB is shown on the Activity Monitor.

I really need help, please.

Apple M1 Pro, Ventura 13.3.1 (a)

fault	19:16:42.660299+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x125727200 -newEndpoint returned nil
fault	19:16:42.661474+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x125727200 -newEndpoint returned nil
fault	19:16:45.671804+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x125727200 -newEndpoint returned nil
fault	19:16:45.672581+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x125727200 -newEndpoint returned nil
fault	19:16:48.679826+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x125727200 -newEndpoint returned nil
fault	19:16:48.680815+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x125727200 -newEndpoint returned nil
fault	19:16:51.688128+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x125727200 -newEndpoint returned nil
fault	19:16:51.689512+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x125727200 -newEndpoint returned nil
fault	19:16:54.697501+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x125727200 -newEndpoint returned nil
fault	19:16:54.698981+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x125727200 -newEndpoint returned nil
fault	19:16:57.706547+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x125727200 -newEndpoint returned nil
fault	19:16:57.707586+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x125727200 -newEndpoint returned nil
fault	19:16:57.708440+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x125727200 -newEndpoint returned nil
fault	19:16:57.709549+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x125727200 -newEndpoint returned nil
fault	19:16:57.721414+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x1257644f0 -newEndpoint returned nil
fault	19:16:57.721954+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x1257644f0 -newEndpoint returned nil
fault	19:16:57.722466+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x1257644f0 -newEndpoint returned nil
fault	19:16:57.723004+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x1257644f0 -newEndpoint returned nil
fault	19:16:57.723798+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x1257644f0 -newEndpoint returned nil
fault	19:16:57.724524+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x1257644f0 -newEndpoint returned nil
fault	19:16:57.725123+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x1257644f0 -newEndpoint returned nil
fault	19:16:57.725462+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x1257644f0 -newEndpoint returned nil
fault	19:17:00.732371+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x1257644f0 -newEndpoint returned nil
fault	19:17:00.733834+0200	Family	CoreData: Unable to create token NSXPCConnection.  NSXPCStoreServerEndpointFactory 0x1257644f0 -newEndpoint returned nil
fault	19:17:03.136800+0200	systemstatusd	Generating name from path: failed to create bundle for executable with identity <STExecutableIdentity: 0x120a04e40> {
    bundlePath = /System/Library/LocationBundles/Traffic.bundle;
    isSystemExecutable = NO;
}
fault	19:17:03.146769+0200	systemstatusd	Generating name from path: failed to create bundle for executable with identity <STExecutableIdentity: 0x120a06500> {
    bundlePath = /System/Library/LocationBundles/Traffic.bundle;
    isSystemExecutable = NO;
}

I have the exact same issue on my 2017 iMac since the last update (macOS 13.3.1). Screen freezes intermittently. I also see the same log entries for the "Family" process and also "imagent", which I believe is for FaceTime and Messages.

I have tried signing out and in with my Apple ID. I also do not run the Xcode beta. I have Xcode installed, but don't use it.

Anyone figure this out? Still an issue with 13.3.1. I would have thought that we would be out of the Beta stage by now, but it looks like lately Apple is really slow to fix problems and continues to offload beta versions of its' os to the public. I remember these days under Microsoft. Who would have ever thought the tables would be turned and MS is the stable OS today. I have 3 new M2 computers and this issue only plagues one of them. I have even wiped and reinstalled the os as well as using a time machine backup from a known good unit and it still does it on this one system. I have been plagued with issues on all of these with one thing or another, but this sleeping issue is the worst.

Looks like it is the PrefPane for Family-Sharing:

Analysis of sampling Family (pid 2374) every 1 millisecond

Process: Family [2374]

Path: /System/Library/CoreServices/Family.app/Contents/MacOS/Family

Load Address: 0x102de0000

Identifier: com.apple.Family

Version: 1.0 (1)

Build Info: Family_FamilySharingPrefPane-167011000000000~118

Code Type: ARM64E

Platform: macOS

Parent Process: ??? [1]

Date/Time: 2023-09-08 18:58:23.976 +0200

Launch Time: 2023-09-08 18:36:22.316 +0200

OS Version: macOS 13.5.2 (22G91)

Report Version: 7

Analysis Tool: /usr/bin/sample

Physical footprint: 28.0M

Physical footprint (peak): 28.3M

Idle exit: untracked

----

Call graph:

859 Thread_16090: Main Thread

+ 859 completeTaskWithClosure(swift::AsyncContext*, swift::SwiftError*) (in libswift_Concurrency.dylib) + 1 [0x23575d215]

FWIW, this process is running on my M1 MBP, although it was shown as "not responding." It did not appear to be causing problems. I turned off Share my Location with another family member and terminated the process in Activity Monitor. It has not returned after a restart, at least so far.