Warning: SUID file "System/Library/CoreServices" has been modified and will not be repaired.

Warning: SUID file "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAg ent" has been modified and will not be repaired.


<Subject Edited by Host>

iMac, Mac OS X (10.6.8)

Posted on Apr 16, 2012 8:40 AM

Reply
95 replies

Feb 7, 2014 4:33 PM in response to PhuBaiYou

1st gen Intel Mac running latest updated version of 10.6.8 as of this date


About 10 days ago, I began to get system freezes ..... except for allowing my mouse to move the cursor, the OS completely ignored all other mouse or keyboard inputs, and the only way to recover was to hold down the power switch (or pull the plug). The freezes became more frequent and eventually required me to cycle power and restart in Safe Mode, then do a controlled (software) shutdown, then re-cold start ... the forced power switch shut downs appeared to be degrading the OS.


This behavior me to use Disk Utility to view and repair permissions. When I did, I got all of the (apparently faux) permissions warnings (which 'repair' doesn't fix) that people have complained about in this thread. Specifically I'm getting 74 permissions violations in the following general categories:


  • Java class files that were globally executable now globally non-executable and visa versa
  • Java libraries with owner access changed from root to an administrative uid
  • Apple remote management language directories converted to files ("...should be drwxr-xr-x , they are -rwxr-xr-x", for example)
  • Java framework file names that should be direct are now links
  • A flashplayer plug-in resource that should only have admin group access has root access, and it should have write access for user and group, but has global read only access
  • The SUID warning that started this thread
  • /private/var/root/ and two of it's resources having an added ACL



I trust the expert advice in prior posts here: these permissions notices are due to Snow Leopard updates that Disk Utility fails to account for. Ergo, the freeze problem I'm having is unlikely to be related to the permission violations.


However, it is very easy to imagine how all of the name aliasing along with a few privilege changes involving the root could be the work of malfeasance. Furthermore, with 70-some-odd warnings that are now to be ignored, it is extremely difficult to tell if any actually indicate a problem that possibly should be addressed.


I am very unhappy that Apple has apparently chosen not to provide mitigation for this issue.


ps - my original message is an off-topic example to explain how I came to be confused by the faux permission warnings given by Disk Utility and how they can cause someone to lose a lot of time chasing a non-problem. If by chance anyone has a clue about the freeze behavior I'm seeing, please direct me to somewhere I can find out about it.

Feb 8, 2014 12:45 AM in response to fiddleaway

Hi, I had an imac built in August 2007 and when I installed Snow Leopard 10.6.3 on it I got the frozrn screen-I could move the cursor around with the mouse but clicking on anything did nothing, as you experienced, the only solution was to force shut down by pressing the startbutton in for 10 seconds or so.


I came first to this forum and found that at that moment there were 74 pages filled with this problem, it turned out to be the graphics processor, some iMacs had an old one originally intendd for those little 11.5 inch screen e-books, those processors were not good enough to run SL.


At the beginning of the discussion people reported they had called Apple and either got a new iMac or had the graphics chip replaced for free. I live in Amsterdam so I contacted the Machouse,there was no Apple Store here back then,and they said it was the graphics chip but they were forbidden by Apple to replace anymore, I contacted a private company here that is Apple certified and asked if they would replace the chip. They said they had been doing that but Apple had said to stop or they would lose thier Apple certfication. I had already noticed that the Netherlands Craig's List had 27 iMacs for sale very cheap, I kept watching but no one took the bait and bought one. I used macTracker to find out the current value by using the serial number-it said the iMac was worth $168 then.


if I were you I would make an account at macforums and ask there about this,I believe Apple has removed the 74 pages of complaints about that since it didn't look good for the profits.


I bought a new Mini in Nov. 2012 and it came with Mountain Lion installed,no joy there but I am not a hacker so I can't build my own PC to run OSX on-actually I don't see why I would want to run an Apple DOS on a PC. I am hoping I am allowed to stay in ML for some time but yesterday there was an update and it had yet another build of the ARDagent.app which seems in system profile to be called Core Services or something-i was not allowed to upgrade iMovie or iPhoto because" I didn't have Maverick installed!!!" I knew from reading the other forums that mavericik like SL and Lion and ML have never been tested to see if Apples own video[Final Cut proX] and audio[Logic pro] apps work, they don't. Logic loses all audio output if I run permission repairs and it is that ARDAgent.app that is never repaired that causes that. I had bought Apple Care so I was able to get real support from an Apple Enterprise company that specialized in audio apps.They said to reset the user ACL's, that helped one time but later the audio dropped out again and Apple care said to use the improved DU in the recovery mode to repair permisions-this did not even report a problem with ARDAgent.app or Core Services and by chosing utilitoes <terminal and typing just res and hitting the tab key I got into password reset mode where one can repair user ACL's.

HTH Macforums great site! do it.

Feb 8, 2014 3:16 AM in response to 55plus

Thank you 55plus !!!


What you report is consistent with what I am seeing. Looks like it may be a graphics card.


I have noticed that just before the freezes, my display flashes. I thought this was caused by system resources that had been munched. As I write this, there are periodic instants of small green rectangles that randomly appear (but so far no freeze has occured). I transferred my HD image to a different internal drive, just to make sure it wasn't a drive problem ... it remains to be seen if freezes stop now. But the momentary flashes on the screen continue.


You may have heard the grumbling from gen 1 intel Mac Pro owners that Apple decided to artifically obsolete these older intel mac pros and not allow Mountain Lion to be loaded onto them even though they had 64-bit CPU's and plenty of horsepower to run it. It is true that the gen 1's needed a graphics card upgrade and new EFI, but apple stood firm in not allowing these units to have the required h/w grades. People had to go a bootleg route if they wanted to make there machines compatible with ML.


The problem has only surfaced recently even though I've been running SL for several months without a hitch ... so maybe the graphics card has just worn out. Sounds like I'm not going to have an easy time replacing it.


I really hate the fact that such a powerful machine that more than meets the needs I have must be replaced in its entirety rather than me being able to replace a major component. But that's the age we are in.


Thanks for getting back to me. It was a big help!

Feb 9, 2014 6:56 AM in response to fiddleaway

Hi fiddleaway, HTH is just an acronym for Hope This Helps. I remember after takng the iMac to the new Apple Store for repair they called the next day and said it is OK come get it. When I got it home I tried a you tube videio and it was over; the screen froze and green rectangles began again and then that final white screen with a 13 inch wide vertical green stripe in the middle-it was the flash players that the graphics set couln't deal with. I had paid bloody Apple €275 for one replaced 2GB Ramm but they didn't check what I had brought it in for- videos.

mac forums is

http://www.mac-forums.com/

Feb 9, 2014 10:50 PM in response to 55plus

Thanks 55plus - I'll try that forum. I've also been told they still might help me at the Apple store even though they're pushing Maverick's these days .... if I do, I'll be sure to tell them to specifically check the graphics card ... if they want to sell me some more memory, I could probably use an extra 2 gigs, but I am 99 44/100% sure that main memory is not the problem.


This problem gives every indication that the graphics card has a bad memory bank which causes the freeze when the system uses it. Coming up in Safe Mode seems to reset the condition somehow, and so far, it doesn't seem like the problem occurs when I'm in safe mode.


You've been very helpful.

Mar 24, 2014 6:36 AM in response to Joseph Kriz

Josheph Kriz's post is actually the best answer. I'm running 10.9.2 on my 2013 iMac and recieved the same error as paula185. I copied the file from my 2008 MBP (MacBook Pro), also running 10.9.2, as suggested by Joseph Kriz, and got the following:

User differs on...should be 0; user is 502.

Group differs on...should be 0; group is 20

Permissions differ on...should be -rwsr-xr-x; they are -rwxr-xr-x

After running permissions repair:

User uploaded file

Apr 2, 2014 6:12 PM in response to 55plus

I've been running a '08 MacBook for a while now, and it's been reasonably ok. Recently aqcuired another (same age roughly) and have been trying to integrate it into an audio setup with my PC. Then after just 4 days the problems mentioned here began. First... the audio died (driver status says it's fine, and running. Audio software tells me to 'connect to an audio card'. None of the devices show up for selection. Thought it was due to soundcard's age (last driver was 2012) but couldn't install, or uninstall the drivers. Or my UCX (Pro audio card). So I try to install Windows via Bootcamp and I keep getting messed about. Repairs needed on already 'repaired' permissions. Needing 10GB spare (despite having about 150GB) on the partition. System freezes.


Pretty sure DavidMac hit the nail on the head, at least it's when my problems started... "Avoid the 10.8.5 update at all costs". I've just spent literally a full week of my time installing all of my audio software, and then trying to integrate it into an existing setup.


I'm avoiding Apple products like the plague in future. There's all this, and the recent MacBookAir overheating within no time at all (no ventilation... too thin). I love my iPad, fantastic bit of hardware, but really.... they can be tons of hassle too. Especially in terms of App compatibility and your silly 'window' of opportunity to downgrade. And did someone mention their own products not working on their own machines???


Apple should spend more time on the portion of your customer base that invests a lot of money in your stuff and only wish to use it 'out of the box' as intended, as opposed to trying to battle hackers (who are always going to win) from supplying people with something, to amend a thing which they probably wouldn't even buy if they were unable to jailbreak, or whatever.


Tut.

May 5, 2014 2:47 PM in response to paula185

We had a problem with the internet connection. Every device had wifi connection but only 1 macbook pro (10.8.5) had no internet connection the rest did. (2 iphones, a macmini and an old macbook pro)

Did a reboot, did a restart of the rooter and internet modem. Still the same, only 1 macbook pro failed to connect to the internet.

Then I repaired disk permissions. The error message of ADRAgent came up that couldn't be fixed.


Tried the suggested replacement of the ADRAgent.app from another computer (also 10.8.5) by Josheph Kriz's

And restarted the computer again. Did a repair permissions, got the: User differs on...should be 0; user is 501 and the rest.

And after everything had been repair, did a restart:


Magically internet is working again.


This MUST be related to the ADRAgent.app, I tried a lot of things to fix the internet connection, including many restarts, but only this tip fixed it.


So you can savely ignore this error message, but, it doesn't fix your problem if you do !-)

Jul 11, 2014 10:18 PM in response to RicoRoyal

All good solutions, as far as my knowledge is concerned, But for my own personal usage, I will, never, ever, use this (ARD) file. So I pose this. I will probably, delete this file shortly, unless someone is able to support A reason why it should not be deleted. (keep in mind I've read all 5 pages of the original discussion, (good stuff) Will it prevent me from doing anything with an Apple generic app ? ALSO [could someone PLEASE ! ! tell me why, when I clicked on " branched to A new discussion"] I got "UNAUTHORIZED ACCESS ! Ouch ! (Was that too many caps and !!!!, ? just a little joke there. ) Thanks for any reply.

Mar 9, 2015 8:58 PM in response to Niel

Why has Apple, in all these years, not removed this error message? Clearly, we should not be telling users that something related to "remote management" has been modified and is in need of repair.


Macs used to be user friendly, now they scare you on purpose.


And don't say it wasn't on purpose, clearly, Apple knows of this and does not care to help make the system more user friendly by removing redundant, meaningless error messages. Why can't they go through the system and clean up this kind of stuff?

Mar 10, 2015 12:19 AM in response to DaddieMac

I'm confused...


Why has Apple, in all these years, not removed this error message?


Why should it remove this error message. It's an error condition. The user has a right (sometimes even a need) to know such things.


Clearly, we should not be telling users that something related to "remote management" has been modified and is in need of repair


'Clearly'? How so? Please explain what's so clear about why this message should be suppressed.


Macs used to be user friendly, now they scare you on purpose.


How is this scaring the user? Scaring the user would be something like '... and your machine is probably infected with malware that's secretly manipulating all the files on your disk - click here to pay us $100 to clean your disk before you lose ALL your data", but we're on Mac OS X, not Windows...


clearly, Apple knows of this and does not care to help make the system more user friendly by removing redundant, meaningless error messages


'Clearly'. There's that word again. How, exactly, is this message either redundant or meaningless? (I concur, yes, this 'clearly' is an error message, so you can have that point'.

More importantly, how should Apple make this message more 'user-friendly'? (and, sorry, suppressing and/or ignoring it are not considered acceptable answers)

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Warning: SUID file "System/Library/CoreServices" has been modified and will not be repaired.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.