El Capitan issues- LaunchServices, CFpreferences, XPC errors
I have a number of issues in the console I am tracing down and even with extensive Internet research no solution.
My gut is a file system journal issue. Physical drive is likely fine but may be logical issue (file system journal?). Alternate explanations would be something awry in /var/folders/ or /System/Library/Cache that is causing the errors in exciting system process.
- Repeated errors accessing /private/var/db/lsd/com.apple.lsdschemes.plist
- 11/27/15 11:08:03.115 AM lsd[259]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist
- Per below even tried creating the folder /var/db/lsd as others have suggested. No help, details below.
- Failure to launch or execute many launch services process including iconservicesagent (long streams of errors for this and other Spotlight services ) several msg below and in the console log posted on pastebin (see below)
- 11/27/15 11:08:03.843 AM iconservicesagent[283]: iconservicesagent launched.
- 11/27/15 3:37:04.173 PM iconservicesagent[283]: -[ISGenerateImageOp generateImageWithCompletion:] Failed to composit image for descriptor <ISBindingImageDescriptor: 0x7fa571906ce0>.
- 11/27/15 11:08:48.000 AM kernel[0]: Sandbox: AssetCacheLocato(554) deny(1) mach-lookup com.apple.lsd.mapdb
- 11/27/15 11:08:48.935 AM AssetCacheLocatorService[554]: LaunchServices: received XPC_ERROR_CONNECTION_INVALID trying to map database
- 11/27/15 11:08:48.935 AM AssetCacheLocatorService[554]: LaunchServices: disconnect event received for service com.apple.lsd.mapdb
- 11/27/15 11:08:48.935 AM AssetCacheLocatorService[554]: LaunchServices: Database mapping failed with result -10822, retrying
- Sandbox blocking of several system process including iconservices
Was guessing a Seatbelt/rootless problem originally but doesn’t seem to be the case after looking at com.apple.xpc.launchd.rootless.plist (both are in the plist per below)
- com.apple.iconservices.iconservicesd YES
- com.apple.iconservices.iconservicesagent YES
- 11/27/15 4:08:19.730 PM sandboxd[132]: ([358]) storeaccountd(358) deny file-write-create /Users/weyer_l/Library/Caches/com.apple.Safari/ProductionBag
Attempted solutions: (prior to diagnostics reports below)
- Restoring from TimeMachine backup
Was able to restore a version that looks good (multiple good reboots). Unfortunately while pulling data off a cloned disk copy of my bad disk I restarted with that cloned bad disk present and that seems to have brought the issue forward to the current/good/restore. To further complicate matters I had another machine that also uses my time capsule that I DIDN’T stop from backing up so unfortunately when I later tried to go back to my “known good” backup, it was no longer present as it’s data had been rolled off. The next oldest version results in all the same issues I started with and described here.
- Reinstall Mac OS X 10.11.1 over the top of self
Unfortunately all issues still present.
- Created /var/db/lsd folder as root with appropriate permissions
Did not fix the problem even though schema file was created inside
- drwxr-xr-x 3 root wheel 102 Nov 27 09:42 lsd
- MBP-TAW:db weyer_l$ ls -la@ lsd
- total 8
- drwxr-xr-x 3 root wheel 102 Nov 27 09:42 .
- drwxr-xr-x 94 root wheel 3196 Nov 27 11:08 ..
- -rw-r--r-- 1 root wheel 42 Nov 27 09:42 com.apple.lsdschemes.plist
- MBP-TAW:db weyer_l$
- Fix user permissions per Linc Davis’s post
Both via terminal and via the changepassword command
- Create new clean install of El Capitan to external disk
Unfortunately see many of the same issues in most cases (likely because the internal SSD is mounted when booted off the “clean” external TB drive)
- Though unlikely tried running virus/malware scan with viriusbarrier but none found
virusbarriers[186]: Starting. Version 10.8.7 (376), avlib 251, definitions 2015112601.
- Disk Repair from recovery partition
- Boot Extensions off (shift boot) to trigger cache rebuild and system cleaning process
- Uninstalled LittleSnitch to ensue system process not being blocked by it and only Apple Seatbelt blocking any prove mach ports
- Created new clean admin user by deleting .AppleSetupDone
New user has same issues implying system and(?) user issue
- EtreCheck (see below)
- Console log of boot
- Linc Davis’s diagnostic Script -
EtreCheck
Report generated 11/27/15, 4:05 PM
Runtime 2:56
Download EtreCheck from http://etresoft.com/etrecheck Click the [Click for support] links for help with non-Apple products.
Click the [Click for details] links for more information about that line.
Hardware Information: (What does this mean?)
MacBook Pro (Retina, 15-inch, Late 2013)
[Click for Technical Specifications]
[Click for User Guide]
MacBook Pro - model: MacBookPro11,3
1 2.6 GHz Intel Core i7 CPU: 4-core
16 GB RAM Not upgradeable
BANK 0/DIMM0
8 GB DDR3 1600 MHz ok
BANK 1/DIMM0
8 GB DDR3 1600 MHz ok
Bluetooth: Good - Handoff/Airdrop2 supported
Wireless: en0: 802.11 a/b/g/n/ac
Battery: Health = Normal - Cycle count = 152 - SN = D863406Y2TAF9CP8L Video Information: (What does this mean?)
Intel Iris Pro
Color LCD 2880 x 1800
NVIDIA GeForce GT 750M - VRAM: 2048 MB System Software: (What does this mean?)
OS X El Capitan 10.11.1 (15B42) - Time since boot: about 4 hours Disk Information: (What does this mean?)
APPLE SSD SM1024F disk0 : (1 TB) (Solid State - TRIM: Yes)
EFI (disk0s1) <not mounted> : 210 MB
RocketMan (disk0s2) / : 999.70 GB (111.46 GB free) Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB USB Information: (What does this mean?)
Apple Inc. Apple Internal Keyboard / Trackpad
Apple Inc. BRCM20702 Hub
Apple Inc. Bluetooth USB Host Controller Thunderbolt Information: (What does this mean?)
Apple Inc. thunderbolt_bus
Apple Inc. Thunderbolt to Gigabit Ethernet Adapter Configuration files: (What does this mean?) /etc/hosts - Count: 36 Gatekeeper: (What does this mean?) Anywhere Kernel Extensions: (What does this mean?) /Applications/Capture One.app [not loaded] com.Leaf.driver.LeafFwXDriverMatcher (1.2.0d1) [Click for support] /Applications/ExpanDrive.app [not loaded] com.expandrive.filesystems.strongfuse (2.8.1 - SDK 10.7) [Click for support] /Applications/Hardwaremonitor.app [not loaded] com.bresink.driver.BRESINKx86Monitoring (8.0) [Click for support] /Applications/Rowmote Helper.app [loaded] com.regularrateandrhythm.driver.RowmoteIREmu (1.2 - SDK 10.11) [Click for support] /Applications/Screenium.app [not loaded] com.synium.driver.screeniumAudio (1.0) [Click for support] /Applications/Toast 14 Titanium/Old/Spin Doctor.app [not loaded] com.hzsystems.terminus.driver (4) [Click for support] /Applications/Toast 14 Titanium/Toast Audio Assistant.app [not loaded] com.Cycling74.driver.Soundflower (1.6.7 - SDK 10.7) [Click for support] /Applications/Toast 14 Titanium/Toast Titanium.app [not loaded] com.roxio.TDIXController (2.0) [Click for support] /Applications/Tunnelblick.app [not loaded] foo.tap (1.0) [Click for support] [not loaded] foo.tun (1.0) [Click for support] /Applications/VMware Fusion.app [not loaded] com.vmware.kext.vmci (90.8.1) [Click for support] [not loaded] com.vmware.kext.vmioplug.15.1.6 (15.1.6) [Click for support] [not loaded] com.vmware.kext.vmnet (0309.46.80) [Click for support] [not loaded] com.vmware.kext.vmx86 (0309.46.80) [Click for support] [not loaded] com.vmware.kext.vsockets (90.8.0) [Click for support] /Applications/Viscosity.app [not loaded] com.viscosityvpn.Viscosity.tap (1.0) [Click for support] [not loaded] com.viscosityvpn.Viscosity.tun (1.0) [Click for support] /Library/Application Support/VPN Tracker 4 [not loaded] com.equinux.VPNTracker.kext.NAT-T (2.2.0) [Click for support] /System/Library/Extensions [not loaded] com.roxio.BluRaySupport (1.1.6) [Click for support]
Launch Agents: (What does this mean?) [loaded] com.adobe.AAM.Updater-1.0.plist [Click for support] [loaded] com.intego.commonservices.integomenu.plist [Click for support] [loaded] com.intego.commonservices.taskmanager.plist [Click for support] [loaded] com.intego.commonservices.uninstaller.plist [Click for support] [running] com.intego.netupdate.agent.plist [Click for support] [loaded] com.intego.virusbarrier.alert.plist [Click for support] [loaded] com.oracle.java.Java-Updater.plist [Click for support] Launch Daemons: (What does this mean?) [loaded] com.adobe.agsservice.plist [Click for support] [loaded] com.adobe.fpsaud.plist [Click for support] [loaded] com.bombich.ccchelper.plist [Click for support] [loaded] com.charlessoft.pacifist.helper.plist [Click for support] [running] com.intego.commonservices.daemon.integod.plist [Click for support] [running] com.intego.commonservices.daemon.taskmanager.plist [Click for support] [loaded] com.intego.commonservices.icalserver.plist [Click for support] [loaded] com.intego.commonservices.metrics.kschecker.plist [Click for support] [running] com.intego.netupdate.daemon.plist [Click for support] [loaded] com.intego.virusbarrier.daemon.emlparser.plist [Click for support] [running] com.intego.virusbarrier.daemon.logger.plist [Click for support] [running] com.intego.virusbarrier.daemon.plist [Click for support] [running] com.intego.virusbarrier.daemon.scanner.plist [Click for support] [loaded] com.microsoft.autoupdate.helpertool.plist [Click for support] [loaded] com.microsoft.office.licensing.helper.plist [Click for support] [loaded] com.microsoft.office.licensingV2.helper.plist [Click for support] [loaded] com.oracle.java.Helper-Tool.plist [Click for support] [running] com.regularrateandrhythm.rowmotehelperaide.plist [Click for support] [loaded] com.rogueamoeba.instanton-agent.plist [Click for support] [loaded] com.sparklabs.ViscosityHelper.plist [Click for support] [loaded] com.surteesstudios.Bartender.BartenderInstallHelper.plist [Click for support] User Launch Agents: (What does this mean?) [loaded] com.adobe.AAM.Updater-1.0.plist [Click for support] [loaded] com.adobe.ARM.[...].plist [Click for support] [loaded] com.apple.SafariBookmarksSyncer.plist - /Applications/Safari.app/Contents/SafariSyncClient.app/Contents/MacOS/SafariSyn cClient: Executable not found! [running] com.spotify.webhelper.plist [Click for support] User Login Items: (What does this mean?)
Flux Application (/Applications/Flux.app)
Bartender 2 Application (/Applications/Bartender 2.app)
ExpanDrive Application (/Applications/ExpanDrive.app)
iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
Things Application (/Applications/Things.app)
CopyPaste Pro Application (/Applications/CopyPaste Pro.app)
Quicken Scheduler Application (/Applications/Quicken 2007/Quicken 2007.app/Contents/SupportApps/Quicken Scheduler.app)
VMware Fusion Start Menu Application (/Applications/VMware Fusion.app/Contents/Library/VMware Fusion Start Menu.app)
Dropbox Application (/Applications/Dropbox.app)
Vitamin-R 2 Application (/Applications/Vitamin-R 2.app)
AdobeResourceSynchronizer Application Hidden (/Applications/Adobe Acrobat XI Pro/Adobe Acrobat Pro.app/Contents/Support/AdobeResourceSynchronizer.app)
Google Drive Application (/Applications/Google Drive.app)
LaunchBar Application (/Applications/LaunchBar.app)
TextExpander Application Hidden (/Applications/TextExpander.app)
MailTagsHelper Application (~/Library/Application Support/Indev/MailTagsHelper.app)
Rowmote Helper Application (/Applications/Rowmote Helper.app)
EvernoteHelper Application (/Applications/Evernote.app/Contents/Library/LoginItems/EvernoteHelper.app) Other Apps: (What does this mean?) [running] at.obdev.LaunchBar.344032 [running] ca.indev.MailTagsHelper.377952 [running] com.PeterHoerster.CopyPasteUniversal.127392 [running] com.apple.xpc.launchd.oneshot.0x1000000a.Fantastical 2 [running] com.apple.xpc.launchd.oneshot.0x1000000b.TextExpander Helper [loaded] com.culturedcode.things.276832 [running] com.etresoft.EtreCheck.152032 [running] com.evernote.Evernote.152352 [running] com.evernote.EvernoteHelper.342752 [running] com.expandrive.ExpanDrive3.781472 [loaded] com.flexibits.fantastical2.mac.launcher [running] com.getdropbox.dropbox.136672 [running] com.google.GoogleDrive.165792 [running] com.intego.virusbarrier.daemon.realtime [running] com.regularrateandrhythm.rowmotehelper.47072 [running] com.smileonmymac.textexpander.274592 [running] com.surteesstudios.Bartender.684512 [running] com.vmware.fusionStartMenu.375392 [running] net.publicspace.dist.vitaminr2.224672 [running] org.herf.Flux.644192 Internet Plug-ins: (What does this mean?)
JavaAppletPlugin: Version: Java 8 Update 66 build 17 Check version
FlashPlayer-10.6: Version: 19.0.0.245 - SDK 10.6 [Click for support]
Default Browser: Version: 601 - SDK 10.11
Flash Player: Version: 19.0.0.245 - SDK 10.6 [Click for support]
LogitechHarmony: Version: 2.0 - SDK 10.7 [Click for support]
OfficeLiveBrowserPlugin: Version: 12.2.6 [Click for support]
SharePointBrowserPlugin: Version: 14.5.7 - SDK 10.6 [Click for support]
Silverlight: Version: 5.1.40728.0 - SDK 10.6 [Click for support]
iPhotoPhotocast: Version: 7.0 - SDK 10.8
User internet Plug-ins: (What does this mean?)
WebEx64: Version: 1.0 - SDK 10.6 [Click for support]
WebEx: Version: 1.0 [Click for support]
Safari Extensions: (What does this mean?)
ClickToFlash
Readability
feedly
Add To Amazon Wish List
Sessions
Image Reveal
Keepvid
The New York Times
TrackIf Button
Tumblr Notifier
Follow Next
Ultimate Status Bar
Ghostery
Craigslist Helper
AdBlock
Adblock Plus
A Cleaner YouTube
Craigslist Helper
Switchtabs
MouseGestures
Type-To-Navigate
Twitter for Safari
YouTube Downloader
Alexa Site Stats
InstapaperIt
Hinter
Coda Notes
Social Fixer
Open in Papers
PunyURL
SafariRestore
Downie
Evernote Web Clipper
Tab Duplicator
Incognito
JS Blocker 5
MLB.com Toolbar
vimari Audio Plug-ins: (What does this mean?)
DVCPROHDAudio: Version: 1.3
BartenderAudioPlugIn: Version: 1.0.0 - SDK 10.10 [Click for support]
3rd Party Preference Panes: (What does this mean?)
Flash Player [Click for support]
Java [Click for support]
OpenBasePreferences [Click for support]
SwitchResX [Click for support] Time Machine: (What does this mean?)
Skip System Files: NO
Mobile backups: OFF
Auto backup: NO - Auto backup turned off Volumes being backed up:
RocketMan: Disk size: 999.70 GB Disk used: 888.23 GB
Destinations:
Backup [Network]
Total size: 2.00 TB
Total number of backups: 16
Oldest backup: 10/28/15, 12:41 AM
Last backup: 11/11/15, 10:13 AM
Size of backup disk: Too small
Backup size 2.00 TB < (Disk used 888.23 GB X 3) Top Processes by CPU: (What does this mean?)
5% WindowServer
3% Dropbox
3% Evernote
2% -bash
2% kernel_task Top Processes by Memory: (What does this mean?)
1.98 GB com.apple.WebKit.WebContent(21)
1.40 GB kernel_task
541 MB Dock
442 MB Safari
393 MB Finder Virtual Memory Information: (What does this mean?)
627 MB Free RAM
15.00 GB Used RAM (4.10 GB Cached)
34 MB Swap Used Diagnostics Information: (What does this mean?)
Nov 27, 2015, 11:07:48 AM Self test - passed
Nov 26, 2015, 04:13:10 AM /Library/Logs/DiagnosticReports/virusbarriers_2015-11-26-041310_[redacted].cpu_ resource.diag [Click for details]
Nov 26, 2015, 12:37:31 AM /Library/Logs/DiagnosticReports/Mail_2015-11-26-003731_[redacted].cpu_resource. diag [Click for details]
Nov 25, 2015, 11:41:06 PM ~/Library/Logs/DiagnosticReports/garcon_2015-11-25-234106_[redacted].crash
Nov 25, 2015, 10:12:31 PM /Library/Logs/DiagnosticReports/EtreCheck_2015-11-25-221231_[redacted].hang
Nov 25, 2015, 08:37:37 PM /Library/Logs/DiagnosticReports/EtreCheck_2015-11-25-203737_[redacted].hang
Nov 25, 2015, 07:23:48 PM /Library/Logs/DiagnosticReports/EtreCheck_2015-11-25-192348_[redacted].hang
Nov 25, 2015, 03:39:07 PM /Library/Logs/DiagnosticReports/Kernel_2015-11-25-153907_[redacted].panic [Click for details]
Nov 25, 2015, 02:52:13 PM /Library/Logs/DiagnosticReports/installd_2015-11-25-145213_[redacted].cpu_resou rce.diag [Click for details]
Nov 25, 2015, 01:54:57 PM /Library/Logs/DiagnosticReports/iTunes_2015-11-25-135457_[redacted].cpu_resourc e.diag [Click for details]
Nov 25, 2015, 11:11:25 AM /Library/Logs/DiagnosticReports/EtreCheck_2015-11-25-111125_[redacted].hang
Nov 25, 2015, 10:36:01 AM /Library/Logs/DiagnosticReports/EtreCheck_2015-11-25-103601_[redacted].hang
Nov 25, 2015, 08:05:55 AM /Library/Logs/DiagnosticReports/Mail_2015-11-25-080555_[redacted].hang