Sandbox WebProcess deny file-read-data /Library/Preferences/com.apple.security-common.plist

Question

Winterbaum Author

Level 1

0 points

Sandbox WebProcess deny file-read-data /Library/Preferences/com.apple.security-common.plist

When i'm starting Safari i can see in logfiles this Error:

sandboxd: WebProcess(32771) deny file-read-data /Library/Preferences/com.apple.security-common.plist

After search in Web i found other deny file-read-data issues and Hints.

But nothing about my WebProcess.

So i'm searching my filesystem of *.sb files.

I found /System/Library/PrivateFrameworks/WebKit2.framework/WebProcess.app/Contents/Res ources/com.apple.WebProcess.sb

And here i have seen, that /Library/Preferences/com.apple.security-common.plist not in allow file-read* list.

Instead there are:

(literal "/Library/Preferences/com.apple.security.common.plist")

I have add

(literal "/Library/Preferences/com.apple.security-common.plist")

Was this the right way to fix the error?

Why does /Library/Preferences/com.apple.security.common.plist not exists?

sh-3.2# ls -l /Library/Preferences/com.apple.security*

-rw-r--r-- 1 lilith admin 687 3 Dez 2008 /Library/Preferences/com.apple.security-common.plist

-rw-r--r-- 1 root wheel 697 23 Jul 18:23 /Library/Preferences/com.apple.security.plist

-rw-r--r-- 1 root admin 353 3 Dez 2008 /Library/Preferences/com.apple.security.systemidentities.plist

MacBook Pro, Mac OS X (10.7.2)

Posted on Dec 4, 2011 3:14 AM

Reply

Answer 1

baltwo

Level 9

62,386 points

Dec 4, 2011 12:25 PM in response to Winterbaum

Winterbaum wrote:

Why does /Library/Preferences/com.apple.security.common.plist not exists?

sh-3.2# ls -l /Library/Preferences/com.apple.security*

-rw-r--r-- 1 lilith admin 687 3 Dez 2008 /Library/Preferences/com.apple.security-common.plist

-rw-r--r-- 1 root wheel 697 23 Jul 18:23 /Library/Preferences/com.apple.security.plist

-rw-r--r-- 1 root admin 353 3 Dez 2008 /Library/Preferences/com.apple.security.systemidentities.plist

Since it shows up, it exists.

When i'm starting Safari i can see in logfiles this Error:

sandboxd: WebProcess(32771) deny file-read-data /Library/Preferences/com.apple.security-common.plist

For that, file a bug report with Apple: http://www.apple.com/feedback/macosx.html

Reply

Answer 2

Winterbaum Author

Level 1

0 points

Dec 5, 2011 1:12 AM in response to baltwo

baltwo wrote:

For that, file a bug report with Apple: http://www.apple.com/feedback/macosx.html

Yes, this will i do.

baltwo wrote:

/Library/Preferences/com.apple.security-common.plist

Since it shows up, it exists.

Yes, this file exists.

But the file that com.apple.WebProcess.sb allows to read should be com.apple.security.common.plist. (with dot between security and common)

The Changetime of this file (03.12.2008) shows me, that this is an File that i'm maybe copy through the migration assistant from my old Powerbook G4 to the new Macbook on 18.12.2003.

Could it be an old format of this file and is never created new?

Reply

Answer 3

baltwo

Level 9

62,386 points

Dec 5, 2011 11:13 AM in response to Winterbaum

Winterbaum wrote:

But the file that com.apple.WebProcess.sb allows to read should be com.apple.security.common.plist. (with dot between security and common)

The Changetime of this file (03.12.2008) shows me, that this is an File that i'm maybe copy through the migration assistant from my old Powerbook G4 to the new Macbook on 18.12.2003.

Could it be an old format of this file and is never created new?

Possibly. The com.apple.security-common.plist in my folder dates from 2/20/09, leading me to conclude that it came from my SL installation and that Lion doesn't need or use it. Move it out, restart, and see what happens.

Reply