Q: Trouble removing files in protected directories in Time Machine backup
My original need was to track down the cause of some recent system hangs and crashes (see bottom of Etrecheck output). When I looked at my system log I noticed some files in my Time Machine backup are causing errors. An example is:
Mar 6 00:00:00 Tynans-MBP kernel[0]: /SourceCache/AppleFSCompression_kexts/AppleFSCompression-68.1.1/Compressors/Dat aless/compressorType5Kext.c:537: Error: post_request error for /Volumes/Seagate Backup Plus Drive/Backups.backupdb/Tynan’s MacBook Pro/2015-01-31-155557/Macintosh HD/.DocumentRevisions-V100/PerUID/501/5/com.apple.documentVersions/E71B8A06-AE4 F-46B2-AD33-AC18572B5279.playground/Documentation/section-80.html: 35
I looked for a way to remove the files using Time Machine. The solution I found in one of the posts in this forum (6660987) called for starting Finder using sudo and then entering Time Machine. I was able to follow that sequence successfully one time and navigate to the "file" E71B8A06-AE4F-46B2-AD33-AC18572B5279.playground. in Time Machine. I right clicked to get the action menu for the item and clicked delete. It appeared to be removed, but when I exited Time Machine (using ESCape) a small window in the screen informed me that the operation failed because I didn't have permission to do that operation on one or more objects.
Subsequent attempts to get a "root" Finder window using sudo have failed, and there have been multiple intervening reboots. If I try to start it using "sudo /System/Library/CoreServices/Finder.app/Contents/MacOS/Finder", there's no new Finder window, the external drive (where I have Time Machine's data in one partition and an Extended Mac OS volume in the second partition) spins up, and the following messages appear in the terminal window (they also appear if I've Quit dropbox):
2015-03-06 16:42:39.780 Finder[552:14557] plugin com.getdropbox.dropbox.garcon interrupted
2015-03-06 16:42:39.781 Finder[552:14557] Hub connection error Error Domain=NSCocoaErrorDomain Code=4097 "Couldn’t communicate with a helper application." (connection to service named com.getdropbox.dropbox.garcon) UserInfo=0x7fc90a905bc0 {NSDebugDescription=connection to service named com.getdropbox.dropbox.garcon}
If, instead, I sudo into root (sudo su - root) and try to start Finder, I get two new (larger) icons for the external drives noted above on the desktop, no new window, and the following error in the root terminal window:
2015-03-06 16:05:58.296 Finder[471:6871] CoreDockSetTrashFull returned error -4959
Problem description:
Etrecheck for my system.
EtreCheck version: 2.1.8 (121)
Report generated March 6, 2015 at 4:58:28 PM EST
Download EtreCheck from http://etresoft.com/etrecheck
Click the [Click for support] links for help with non-Apple products.
Click the [Click for details] links for more information about that line.
Hardware Information: ℹ️
MacBook Pro (Retina, Mid 2012) (Verified)
MacBook Pro - model: MacBookPro10,1
1 2.3 GHz Intel Core i7 CPU: 4-core
8 GB RAM Not upgradeable
BANK 0/DIMM0
4 GB DDR3 1600 MHz ok
BANK 1/DIMM0
4 GB DDR3 1600 MHz ok
Bluetooth: Good - Handoff/Airdrop2 supported
Wireless: en0: 802.11 a/b/g/n
Battery Health: Normal - Cycle count 54
Video Information: ℹ️
Intel HD Graphics 4000
Color LCD spdisplays_2880x1800Retina
NVIDIA GeForce GT 650M - VRAM: 1024 MB
System Software: ℹ️
OS X 10.10.2 (14C109) - Time since boot: 1:0:46
Disk Information: ℹ️
APPLE SSD SM256E disk0 : (251 GB)
EFI (disk0s1) <not mounted> : 210 MB
Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
Macintosh HD (disk1) / : 249.77 GB (141.41 GB free)
Core Storage: disk0s2 250.14 GB Online
USB Information: ℹ️
Seagate Backup+ Desk M 2 TB
EFI (disk2s1) <not mounted> : 315 MB
Seagate Backup Plus Drive (disk2s2) /Volumes/Seagate Backup Plus Drive : 1.49 TB (1.03 TB free)
Seagate External Storage 1 (disk2s3) /Volumes/Seagate External Storage 1 : 511.87 GB (442.10 GB free)
Apple Inc. FaceTime HD Camera (Built-in)
Apple Inc. Apple Internal Keyboard / Trackpad
Apple Inc. BRCM20702 Hub
Apple Inc. Bluetooth USB Host Controller
Thunderbolt Information: ℹ️
Apple Inc. thunderbolt_bus
Gatekeeper: ℹ️
Mac App Store and identified developers
Kernel Extensions: ℹ️
/Applications/VMware Fusion.app
[not loaded] com.vmware.kext.vmci (90.6.3) [Click for support]
[not loaded] com.vmware.kext.vmioplug.14.1.3 (14.1.3) [Click for support]
[not loaded] com.vmware.kext.vmnet (0231.47.74) [Click for support]
[not loaded] com.vmware.kext.vmx86 (0231.47.74) [Click for support]
[not loaded] com.vmware.kext.vsockets (90.6.0) [Click for support]
/Library/Extensions
[loaded] com.sophos.kext.sav (9.2.50 - SDK 10.8) [Click for support]
[loaded] com.sophos.nke.swi (9.2.50 - SDK 10.8) [Click for support]
Launch Agents: ℹ️
[running] com.canon.MFManager.plist [Click for support]
[running] com.sophos.uiserver.plist [Click for support]
[loaded] org.macosforge.xquartz.startx.plist [Click for support]
Launch Daemons: ℹ️
[loaded] com.adobe.fpsaud.plist [Click for support]
[loaded] com.github.GitHub.GHInstallCLI.plist [Click for support]
[running] com.sophos.common.servicemanager.plist [Click for support]
[loaded] org.macosforge.xquartz.privileged_startx.plist [Click for support]
[loaded] org.wireshark.ChmodBPF.plist [Click for support]
User Launch Agents: ℹ️
[loaded] com.adobe.ARM.[...].plist [Click for support]
[loaded] com.valvesoftware.steamclean.plist [Click for support]
User Login Items: ℹ️
iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
smcFanControl Application (/Applications/Utilities/smcFanControl.app)
Dropbox Application (/Applications/Dropbox.app)
SpeechSynthesisServer Application (/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks /SpeechSynthesis.framework/Versions/A/SpeechSynthesisServer.app)
VMware Fusion Start Menu Application (/Applications/VMware Fusion.app/Contents/Library/VMware Fusion Start Menu.app)
Alfred 2 Application (/Applications/Alfred 2.app)
Internet Plug-ins: ℹ️
FlashPlayer-10.6: Version: 16.0.0.305 - SDK 10.6 [Click for support]
QuickTime Plugin: Version: 7.7.3
AdobePDFViewerNPAPI: Version: 11.0.10 - SDK 10.6 [Click for support]
AdobePDFViewer: Version: 11.0.10 - SDK 10.6 [Click for support]
Flash Player: Version: 16.0.0.305 - SDK 10.6 [Click for support]
Default Browser: Version: 600 - SDK 10.10
Silverlight: Version: 5.1.30514.0 - SDK 10.6 [Click for support]
User internet Plug-ins: ℹ️
rbjnplugin_2.7.232.8: Version: rbjnplugin 2.7.232.8 - SDK 10.8 [Click for support]
rbjninstallplugin_2.7.232.8: Version: rbjninstallplugin 2.7.232.8 - SDK 10.8 [Click for support]
WebEx64: Version: 1.0 - SDK 10.6 [Click for support]
3rd Party Preference Panes: ℹ️
Flash Player [Click for support]
Time Machine: ℹ️
Skip System Files: NO
Mobile backups: OFF
Auto backup: NO - Auto backup turned off
Volumes being backed up:
Macintosh HD: Disk size: 249.77 GB Disk used: 108.36 GB
Seagate External Storage 1: Disk size: 511.87 GB Disk used: 69.77 GB
Destinations:
Seagate Backup Plus Drive [Local]
Total size: 1.49 TB
Total number of backups: 51
Oldest backup: 2014-07-30 00:31:36 +0000
Last backup: 2015-03-06 15:13:13 +0000
Size of backup disk: Adequate
Backup size 1.49 TB > (Disk used 178.13 GB X 3)
Top Processes by CPU: ℹ️
5% WindowServer
1% firefox
1% fontd
0% thunderbird
0% SophosUIServer
Top Processes by Memory: ℹ️
739 MB firefox
361 MB thunderbird
223 MB WindowServer
189 MB InterCheck
180 MB SophosScanD
Virtual Memory Information: ℹ️
1.12 GB Free RAM
3.62 GB Active RAM
2.59 GB Inactive RAM
1.25 GB Wired RAM
1.82 GB Page-ins
0 B Page-outs
Diagnostics Information: ℹ️
Mar 6, 2015, 04:42:39 PM /Library/Logs/DiagnosticReports/garcon_2015-03-06-164239_[redacted].crash
Mar 6, 2015, 03:57:00 PM Self test - passed
Mar 6, 2015, 03:36:23 PM /Library/Logs/DiagnosticReports/garcon_2015-03-06-153623_[redacted].crash
Mar 6, 2015, 03:10:48 PM /Library/Logs/DiagnosticReports/garcon_2015-03-06-151048_[redacted].crash
Mar 6, 2015, 03:10:13 PM /Library/Logs/DiagnosticReports/Finder_2015-03-06-151013_[redacted].crash
Mar 6, 2015, 02:58:47 PM /Library/Logs/DiagnosticReports/garcon_2015-03-06-145847_[redacted].crash
Mar 6, 2015, 01:48:48 PM /Library/Logs/DiagnosticReports/com.apple.AddressBook.InternetAccountsBridge_20 15-03-06-134848_[redacted].crash
Mar 6, 2015, 11:52:13 AM /Library/Logs/DiagnosticReports/garcon_2015-03-06-115213_[redacted].crash
Mar 6, 2015, 11:45:47 AM /Library/Logs/DiagnosticReports/garcon_2015-03-06-114547_[redacted].crash
Mar 6, 2015, 09:46:12 AM /Library/Logs/DiagnosticReports/thunderbird_2015-03-06-094612_[redacted].hang
Mar 5, 2015, 02:57:56 PM /Library/Logs/DiagnosticReports/backupd_2015-03-05-145756_[redacted].cpu_resour ce.diag [Click for details]
Mar 3, 2015, 11:32:39 PM /Library/Logs/DiagnosticReports/backupd_2015-03-03-233239_[redacted].cpu_resour ce.diag [Click for details]
MacBook Pro, OS X Yosemite (10.10.2), Etrecheck included in posting.
Posted on Mar 6, 2015 2:11 PM