HN5144
Level 1 (0 points)

Q: disk utility permission - how to interpret - possibly security intrusionst

 

 

Verifying permissions for “Macintosh HD”

   whole disk (Apple_HFS : 0): calculated CRC32 $E103DFF6

: Warning: SUID file “System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAg ent” has been modified and will not be repaired.

 

Meaning???

 

 

Another examples

erifying permissions for “Macintosh HD”

Group differs on “Library/Printers/InstalledPrinters.plist”; should be 80; group is 0.

Permissions differ on “Library/Printers/InstalledPrinters.plist”; should be -rw-rw-rw- ; they are -rw-r--r-- .

Warning: SUID file “System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAg ent” has been modified and will not be repaired.

Permissions verification complete

 

 

These are recurring issues...I've had so many problems that Mac has assigned a personal engineer...

MacBook Air (13-inch Mid 2012), OS X Mavericks (10.9)

Posted on Dec 11, 2013 10:11 AM

Close
HN5144

Q: disk utility permission - how to interpret - possibly security intrusionst

  • All replies
  • Helpful answers

  • by Linc Davis,Helpful

    Linc Davis Linc Davis Dec 11, 2013 10:50 AM in response to HN5144
    Level 10 (208,037 points)
    Applications
    Dec 11, 2013 10:50 AM in response to HN5144

    Meaning?

     

    None. It's normal.

    Although it’s immensely popular, repairing permissions is a waste of time unless you have a specific indication of a permission error involving system files, which is rare, or a boot failure. It is not a universal rite of healing for computers. It has traditionally spewed bogus warning messages that mean absolutely nothing.

    The built-in help for Disk Utility reads in part:

    If you see an alert or a message that says your permissions are set incorrectly, you can correct the disk’s permissions by clicking Repair Disk Permissions.

    It’s justifiable, though rarely necessary, to repair permissions after running a third-party software installer, as defective installers have been known to damage the permissions of system files.

  • by HN5144,

    HN5144 HN5144 Dec 29, 2013 5:10 PM in response to Linc Davis
    Level 1 (0 points)
    Dec 29, 2013 5:10 PM in response to Linc Davis

    Right---

     

    However when you you do a repair, then it is successful, yet 1 minute later you run it again and the same permissions exist again...I would think that is indicative of a problem.

     

    Also, I ran disk utility and discovered that permission for network utility were off...again, I had to rectify this issue twice.

     

    Further, boot camp drivers on a disk for Mac OS Snow Leopard 10.6 failed to install despite directions per mac docs...

    This major issue was that the bootcamp control panel never appeared on the Windows side...also more importantly, the disk could not be read on the windows side...I did convert to NTFS...however, apple docs didn't specifically state that this would pose a problem.

     

    I assume it was NTFS then?  Lastly, somehow this disk is now formatted as MBR and I can no longer boot back into Mac Mini Operating system...nightmare on all fronts...When things recur over and over and you follow directions to the T....yet they still occur...that means something is going on more than just standard errors that people think are problems that aren't.  I have zero third party softwares installed...to answer your question in advance.....

  • by hands4,

    hands4 hands4 Dec 30, 2013 2:40 PM in response to HN5144
    Level 4 (2,227 points)
    Dec 30, 2013 2:40 PM in response to HN5144

    Disk Utility reports many errors durring a disk permissions repair that are not important.  Don't worry about them.

    http://support.apple.com/kb/ts1448

  • by Klaus1,

    Klaus1 Klaus1 Dec 30, 2013 4:13 PM in response to HN5144
    Level 8 (48,913 points)
    Dec 30, 2013 4:13 PM in response to HN5144

    As long as the report ends up with 'Permissions repair complete' then, as far as permissions go, you are fine. You can ignore the various statements in the report:

     

    Permissions you can ignore on 10.5 onwards:

     

    http://support.apple.com/kb/TS1448

     

    Using 'should be -rw-r--r-- , they are lrw-r--r--' as an example, you will see the that the permissions are not changed, but the | indicates a different location. This is because an update to Leopard onwards changed the location of a number of system components.

     

    Poster rccharles has provided this description of what it all means:

     

    drwxrwxrwx
     
    d = directory


    r = read

    w = write


    x = executeable program

     

    drwxrwxrwx

    |  |  |

    |  |   all other users not in first two types

    |  | 

    |  group

    | 

    owner


    a little more info

    Before the user had read & write. A member of the group had read.

    After, only the user had read & write.