ChadMe

Q: Mystery - LaunchDaemon respawning issue

Every once in a while, I check the Console to see how things are going… and it shows a service respawning every 10 seconds, apparently into the next century. Can anyone tell me how to determine what app or process is causing this “coresymbolicationd” error?

 

Below are the error messages that repeat in the Console, and a description of what I’ve done to locate the error thus far. I’m running El Capitan (OS X 10.11.2) on a MacBook Pro Retina, 15-inch, Mid 2014.

 

Repeating Console messages:

1/13/16 8:04:18.000 PM kernel[0]: Sandbox: coresymbolicatio(6806) System Policy: deny(1) file-write-create /System/Library/Caches/com.apple.coresymbolicationd

1/13/16 8:04:18.897 PM coresymbolicationd[6806]: /System/Library/Caches/com.apple.coresymbolicationd/data does not exist, resetting cache

1/13/16 8:04:18.897 PM coresymbolicationd[6806]: Attempt to create [/System/Library/Caches/com.apple.coresymbolicationd/data] failed. No such file or directory

1/13/16 8:04:18.897 PM coresymbolicationd[6806]: Unable to open storage at /System/Library/Caches/com.apple.coresymbolicationd/data

1/13/16 8:04:18.898 PM com.apple.xpc.launchd[1]: (com.apple.coresymbolicationd) Service only ran for 0 seconds. Pushing respawn out by 10 seconds.

 

My diagnostic efforts so far:

- I deleted all User and System Cache files with Onyx. Same messages.

- I logged in in Safe Mode.  Same messages.

- I logged in as Guest. NO PROBLEM, NO MESSAGES!!

- OK, so because of the lack of a problem as a Guest, I logged back in as me and removed all Startup items except for Sophos and Microsoft Keyboard (for my long-used ergonomic keyboard). No joy, same messages upon restart.

 

Where is this error coming from? More generally, how do I track down how an error message is related to running processes?

 

Can anyone out there help keep me sane (perhaps a separate question)?

 

Many thanks for your reply!

MacBook Pro with Retina display, OS X El Capitan (10.11.2)

Posted on Jan 13, 2016 6:14 PM

Close

Q: Mystery - LaunchDaemon respawning issue

  • All replies
  • Helpful answers

  • by Linc Davis,

    Linc Davis Linc Davis Jan 13, 2016 8:40 PM in response to ChadMe
    Level 10 (207,926 points)
    Applications
    Jan 13, 2016 8:40 PM in response to ChadMe

    This procedure is a diagnostic test. It makes no changes to your data.

    Please triple-click anywhere in the line below on this page to select it:

    ls -@BOaen /S*/L*/Caches | pbcopy

    Copy the selected text to the Clipboard by pressing the key combination command-C.

    Launch the built-in Terminal application in any one of the following ways:

    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

    ☞ In the Finder, select Go Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

    ☞ Open LaunchPad and start typing the name.

    Paste into the Terminal window by pressing the key combination command-V. I've tested these instructions only with the Safari web browser. If you use another browser, you may have to press the return key after pasting.

    Wait for a new line ending in a dollar sign ($) to appear below what you entered.

    The output of the command will be automatically copied to the Clipboard. If the command produced no output, the Clipboard will be empty. Paste into a reply to this message.

    The Terminal window doesn't show the output. Please don't copy anything from there.

  • by ChadMe,

    ChadMe ChadMe Jan 14, 2016 7:50 AM in response to Linc Davis
    Level 1 (4 points)
    iPhone
    Jan 14, 2016 7:50 AM in response to Linc Davis

    Thank you for your reply! Here are the results:

     

    total 0

    drwxr-xr-x   5 0  0  restricted  170 Oct 15 16:43 .

    drwxr-xr-x  79 0  0  restricted 2686 Oct 10 21:44 ..

    drwxr-xr-x   3 0  0  restricted  102 Oct 10 21:44 com.apple.bootstamps

    drwxr-xr-x   2 0  0  restricted   68 Oct 10 21:44 com.apple.corestorage

    drwxr-xr-x   4 0  0  restricted  136 Oct 15 16:43 com.apple.kext.caches

  • by Linc Davis,

    Linc Davis Linc Davis Jan 14, 2016 8:01 AM in response to ChadMe
    Level 10 (207,926 points)
    Applications
    Jan 14, 2016 8:01 AM in response to ChadMe

    There's a problem with your OS X installation. The simplest way, but not the fastest way, to fix it is to reinstall the OS. Unless you're in a hurry or have metered network access, that's what I suggest, especially since I don't know whether there are other problems with the installation. Please back up all data before reinstalling. You won't need the backup unless something goes wrong.

    The advanced shortcut below, if it works, may save you some downtime (and the cost of a multi-gigabyte download, if applicable.)

    1. Back up all data.

    2. Disconnect all external storage devices.

    3. Start up in Recovery mode. Select a language, if prompted. The OS X Utilities screen will appear. One of the options is to install OS X. That's not what you're going to do.

    4. This step is only necessary if you use FileVault 2. If you don't know what FileVault is, you're not using it. Go to the next step. Otherwise, launch Disk Utility, then select the icon of the FileVault volume ("Macintosh HD," unless you gave it a different name.) It will be nested below another drive icon. Click the Unlock button in the toolbar and enter your login password when prompted. Then quit Disk Utility to be returned to the main screen.

    5. Select Get Help Online. Safari will launch. While in Recovery, you'll have no access to your bookmarks, but you won't need them. Load this web page.

    6. Triple-click anywhere in the line below to select it:

    chflags -R norestricted /V*/*/S*/*/Caches

    Copy the selected text to the Clipboard by pressing the key combination command-C.

    7. Quit Safari. You'll be returned to the OS X Utilities screen.

    From the menu bar, select

              Utilities Terminal

    The Terminal application will launch. Paste into the Terminal window by pressing the key combination command-V.

    Wait for a new line ending in a hash sign (#) to appear. Quit Terminal to be returned to the main screen.

    8. Select

               Restart

    from the menu bar.

    9. This step must be carried out after the restart and while you're logged in as an administrator—not in Recovery mode. If you have only one user account, you are the administrator.

    Select and copy this line as in Step 6:

    sudo /usr/libexec/xpchelper --rebuild-cache

    Paste into a Terminal window as before. You'll be prompted for your login password. Nothing will be displayed when you type it. Type carefully and then press return. If you don’t have a login password, you’ll need to set one before you can run the command. You may get a one-time warning to be careful. Confirm. You don't need to post the warning.

    If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator. Log in as one and start over.

    Wait for a new line ending in a dollar sign ($) to appear below what you entered.

    10. Do as in Step 9 with this line:

    sudo /usr/libexec/*/app_sandbox_cache_builder --rebuild-cache

    You can then quit Terminal.

  • by ChadMe,

    ChadMe ChadMe Jan 14, 2016 1:17 PM in response to Linc Davis
    Level 1 (4 points)
    iPhone
    Jan 14, 2016 1:17 PM in response to Linc Davis

    This is quite a detailed reply -- THANK YOU!

     

    I am nervous about "reinstalling the OS" only because I don't know what ELSE I will have to do afterwards. I have a very large set of apps installed to do my work. And I see multiple answers to the following questions when I search online.

     

    Will any of the apps have to be reinstalled?

    Will all existing preferences, licenses, settings, etc. have to be reconfigured?

    In other words, after a reinstall (assuming all goes well) is there a bunch of cleanup and tweaking to do, or am I good to go immediately?

     

    I will definitely back up before all of this.

     

    MANY THANKS!!

  • by Linc Davis,Solvedanswer

    Linc Davis Linc Davis Jan 14, 2016 1:22 PM in response to ChadMe
    Level 10 (207,926 points)
    Applications
    Jan 14, 2016 1:22 PM in response to ChadMe

    All your data, including software installations, will be preserved, except Xcode and the Apple-distributed Java runtime. If you use either of those (unlikely), you'll have to reinstall them.

     

    If you take the shortcut, nothing will change except some hidden OS files.

  • by ChadMe,

    ChadMe ChadMe Jan 15, 2016 8:35 AM in response to Linc Davis
    Level 1 (4 points)
    iPhone
    Jan 15, 2016 8:35 AM in response to Linc Davis

    Linc,

     

    I did the longer Reinstall with the download. Result: nailed it! Repeating error eliminated. Error messages in console still verbose, but no obvious problems. What magic this?

     

    MANY THANKS!!

  • by Randy Weber,

    Randy Weber Randy Weber Mar 2, 2016 7:56 AM in response to Linc Davis
    Level 1 (95 points)
    Mar 2, 2016 7:56 AM in response to Linc Davis

    Linc,

     

    Thanks for your steps to fix this.  I've been looking for a means to correct this issue without re-installing for a while.  However when I tried your directions, the RESTRICTED status of the /System/Library/Caches folder and its contents reverted back once I rebooted the system.  So the subsequent --rebuild-cache commands didn't work.  To correct this, prior to your steps I disabled SIP by using the "csrutil disable" command when in the recovery mode Terminal. Then changed the flags of the folder and its contents and then rebooted and did your remaining steps.  Then went back into Recovery mode and enabled SIP by "csrutil enable", then rebooted.  All worked fine then. 

  • by David Losada,

    David Losada David Losada Mar 19, 2016 4:26 AM in response to Linc Davis
    Level 1 (18 points)
    Mac OS X
    Mar 19, 2016 4:26 AM in response to Linc Davis

    Linc, you're an absolute genius. And your instructions are the best written and the clearest i've ever found. Thanks to you and to Randy Weber (I disabled SIP before changing flags too) I also get rid of those nasty respawn messages due to the restricted conditions revealed by your first command. I reenabled SIP --without debug (XtraFinder needs it this way) after rebuilding the xpc helper cache.

     

    I must say that i even reinstall 11.11.3 prior to finding this thread. And the respawn messages were there even after the reinstallation.

     

    But I'm still having the /System/Library/Caches/com.apple.coresymbolicationd folder with a prohibitory sign over its icon.

     

    Captura de pantalla 2016-03-19 a las 12.20.37.jpg

     

    I don't know if it's normal. I think that I've always had that prohibitory sign over com.apple.coresimbolicationd. But there's a lot of people that talks about the size of tthat folder growing to absurdly high sizes, and I cannot even know the size because the folder is locked for me.

     

    On the other hand, I'm still getting a restricted condition on something that i cannot identify. I don¡t know if the prohibitory sign and this restriction are related. See line 3:

     

    total 736

    drwxr-xr-x  12 0  0  -             408 19 mar 10:56 .

    drwxr-xr-x  79 0  0  restricted   2686 19 mar 10:52 ..

    drwxr-xr-x   6 0  0  -             204 19 mar 10:54 com.apple.CVMS

    -rw-r--r--   1 0  0  -           42890 18 mar 21:10 com.apple.Components2.SystemCache.Components

    -rw-r--r--   1 0  0  -           59864 18 mar 21:22 com.apple.Components2.SystemCache.QuickTimeComponents

    -rw-r--r--   1 0  0  -            8820 19 mar 10:56 com.apple.IntlDataCache.le

    -rw-r--r--   1 0  0  -           36652 19 mar 10:56 com.apple.IntlDataCache.le.kbdx

    -rw-r--r--   1 0  0  -           17883 19 mar 11:56 com.apple.app-sandbox-cache.plist

    drwx------   3 0  0  -             102 19 mar 10:56 com.apple.coresymbolicationd

    drwxr-xr-x   4 0  0  -             136 19 mar 10:52 com.apple.kext.caches

    -rw-r--r--   1 0  0  -            6559 19 mar 11:56 com.apple.xpc.extensions.cache

    -rw-r--r--   1 0  0  -          189195 19 mar 11:56 com.apple.xpchelper.cache

     

    Thanks again for your help.

  • by David Losada,

    David Losada David Losada Mar 27, 2016 5:16 AM in response to David Losada
    Level 1 (18 points)
    Mac OS X
    Mar 27, 2016 5:16 AM in response to David Losada

    Well. Things are not so great. After updating to 10.11.4, the System/Library/Cahes folder is not there. And Console is plagued with messages about trying to write in it.

  • by David Losada,

    David Losada David Losada Mar 28, 2016 12:42 AM in response to David Losada
    Level 1 (18 points)
    Mac OS X
    Mar 28, 2016 12:42 AM in response to David Losada

    I've disabled totally SIP. It's the only way I can find El Capitan usable.

  • by Bart-Jan,

    Bart-Jan Bart-Jan May 8, 2016 5:56 AM in response to Linc Davis
    Level 1 (4 points)
    May 8, 2016 5:56 AM in response to Linc Davis

    confirm: respawning is gone after rebuilding caches.

    Tnx.