vom
Level 1 (13 points)

Q: Find My Friends widget - El Capitan - not working

Hello,

 

I just did a fresh install of El Capitan on my machine - and have all the updates (so I'm on 10.11.3).  When I first installed and punched in my iCloud info - FMF widget seemed to work.  Later at some point - my friends (really just my family) came up - but all grey and Unavailable. 

 

Frustrated by this - I tried signing out of iCloud and back in on my Mac.  Now the widget is completely blank - no Friends listed.  Just the link to 'learn more'.

 

Has anyone experienced this ?  Super frustrating - I know this widget is a minor thing - but I was looking forward to it in El Capitan.

 

I have an iPhone and it works there - and I can hit icloud.com in a browser and it works there.  It's the just widget that is now dead in the water.

 

Any info would be appreciated - thanks.

MacBook Air (13-inch Mid 2013), OS X El Capitan (10.11.3)

Posted on Feb 8, 2016 6:47 PM

by vom,Solvedanswer
vom vom
Level 1 (13 points)
A:

I fixed it.  It was default sandboxing policy blocking it.  I updated my ticket with this same info.

 

Couple of notes first - this only affects you if you are using a proxy config that's not on ports 80/443/8888.  This involves temporarily disabling system integrity protection as well as editing important system files.  The usual warnings and disclaimers about breaking your system apply.

 

---

I fixed it. It's the default sanbox policy for fmfd only allowing ports 80/443/8888.

 

I rebooted into Recovery - and disabled SIP (csrutil). Then when booted - I edited /System/Library/Sandbox/Profiles/fmfd.sb, and changed the end adding port 3128:

 

(allow network-outbound

(literal "/private/var/run/mDNSResponder")

(remote tcp "*:443")

(remote tcp "*:8888")

(remote tcp "*:80")

(remote tcp "*:3128"))

 

I can now use the widget - as well as Details in messages works.

 

I'd be curious to know if this could be added permanently in OSX from Apple ?

---

Posted on Feb 12, 2016 7:11 PM

Close
vom

Q: Find My Friends widget - El Capitan - not working

  • All replies
  • Helpful answers

  • by vom,

    vom vom Feb 9, 2016 7:01 AM in response to vom
    Level 1 (13 points)
    Feb 9, 2016 7:01 AM in response to vom

    I opened an Apple Bug on this:

    24566728

  • by vom,

    vom vom Feb 10, 2016 7:02 PM in response to vom
    Level 1 (13 points)
    Feb 10, 2016 7:02 PM in response to vom

    I might have found the culprit.  I use a system-wide proxy on my machine (SSH tunnel to squid on the remote box).  Everything else seems to be fine through this (Safari, App Store, Messages, other NC widgets...).  Been using it for years.

     

    When I disable this - FMF widget works.  When I put it back - it says unavailable.

     

    I've updated my bug report - hopefully it gets some traction.

  • by vom,Solvedanswer

    vom vom Feb 12, 2016 7:11 PM in response to vom
    Level 1 (13 points)
    Feb 12, 2016 7:11 PM in response to vom

    I fixed it.  It was default sandboxing policy blocking it.  I updated my ticket with this same info.

     

    Couple of notes first - this only affects you if you are using a proxy config that's not on ports 80/443/8888.  This involves temporarily disabling system integrity protection as well as editing important system files.  The usual warnings and disclaimers about breaking your system apply.

     

    ---

    I fixed it. It's the default sanbox policy for fmfd only allowing ports 80/443/8888.

     

    I rebooted into Recovery - and disabled SIP (csrutil). Then when booted - I edited /System/Library/Sandbox/Profiles/fmfd.sb, and changed the end adding port 3128:

     

    (allow network-outbound

    (literal "/private/var/run/mDNSResponder")

    (remote tcp "*:443")

    (remote tcp "*:8888")

    (remote tcp "*:80")

    (remote tcp "*:3128"))

     

    I can now use the widget - as well as Details in messages works.

     

    I'd be curious to know if this could be added permanently in OSX from Apple ?

    ---

  • by JECurran,

    JECurran JECurran Jun 22, 2016 3:37 PM in response to vom
    Level 1 (9 points)
    Mac OS X
    Jun 22, 2016 3:37 PM in response to vom

    I rebooted into Recovery - and disabled SIP (csrutil). Then when booted - I edited /System/Library/Sandbox/Profiles/fmfd.sb, and changed the end adding port 3128:

     

    This is a little bit intimidating to the less technically inclined. I there a step by step process that an average user might use to resolve this problem?