You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Error message when adding account for TimeMachine

Hi,

I'm getting the below error in system.log when I enter my account details to access a time machine drive

system.log:Feb 14 11:31:04 iMac-5K sandboxd[133] ([25623]): kcproxy(25623) System Policy: deny file-write-unlink /Library/Keychains/System.keychain

The above error is seen when using Keychani Access to perform the add, when I use the Control Panel route to add I get a slightly different error

system.log:Feb 14 11:19:12 iMac-5K sandboxd[133] ([465]): writeconfig(465) System Policy: deny file-write-unlink /Library/Keychains/System.keychain

So it looks to be a sandbox configuration problem?

Keith

iMac (Retina 5K, 27-inch, Late 2015), OS X El Capitan (10.11.3)

Posted on Feb 14, 2016 3:55 AM

Reply
7 replies

Feb 14, 2016 9:07 PM in response to Linc Davis

I'm trying to configure TimeMachine


From the System->settings->TimeMachine->Select Backup Disk dialog it fails


I also tried just entering in a new password entry into Keychain Access and get the same problem , that fais


the system.log messages are from those actions


last night I reinstalled the OS ( OPTION-CMD-R boot option ) from the network, and I still have the issue. All my other macs are working fine, all on the same version of El Capitan.


Keith

Feb 14, 2016 10:09 PM in response to kdd_user

This procedure is a diagnostic test. It makes no changes to your data.

Please triple-click anywhere in the line below on this page to select it:

ls -@BOaen /L*/Keyc* | pbcopy

Copy the selected text to the Clipboard by pressing the key combination command-C.

Launch the built-in Terminal application in any one of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Paste into the Terminal window by pressing the key combination command-V. I've tested these instructions only with the Safari web browser. If you use another browser, you may have to press the return key after pasting.

Wait for a new line ending in a dollar sign ($) to appear below what you entered.

The output of the command will be automatically copied to the Clipboard. If the command produced no output, the Clipboard will be empty. Paste into a reply to this message.

The Terminal window doesn't show the output. Please don't copy anything from there.

Feb 16, 2016 12:40 AM in response to Linc Davis

Hi Linc,


Please see below. I'm command line literate, so anything else that would be helpful, please just let me know.


Keith


iMac:~ keith$ ls -@BOaen /L*/Keyc*

total 448

drwxr-xr-x 7 0 0 - 238 14 Feb 20:46 .

drwxr-xr-x+ 64 0 0 sunlnk 2176 14 Feb 20:33 ..

0: ABCDEFAB-CDEF-ABCD-EFAB-CDEF0000000C deny delete

-r--r--r--@ 1 0 0 - 0 16 Jan 13:10 .fl043D1EDD

com.apple.quarantine 29

-r--r--r-- 1 0 0 - 0 16 Jan 13:10 .fl947E1BDB

-rw-r--r-- 1 0 0 restricted 124164 14 Jan 19:08 System.keychain

-rw-r--r-- 1 0 0 - 35272 16 Jan 13:17 System.keychain-orig

-rw-r--r--@ 1 0 0 - 63216 18 Jan 20:10 apsd.keychain

com.apple.quarantine 29

iMac:~ keith$

Feb 19, 2016 7:19 AM in response to kdd_user

Certain files have a property incorrectly set that will prevent them from being changed or deleted while the system is running. That property can only be removed in Recovery mode.

1. Back up all data. There are ways to back up a computer that isn't fully functional. Ask if you need guidance. Don't skip this step.

2. Disconnect all external storage devices.

3. Start up in Recovery mode. Select a language, if prompted. The OS X Utilities screen will appear. One of the options is to install OS X. That's not what you're going to do.

4. This step is only necessary if you use FileVault 2. If you don't know what FileVault is, you're not using it. Go to the next step. Otherwise, launch Disk Utility, then select the icon of the FileVault volume ("Macintosh HD," unless you gave it a different name.) It will be nested below another drive icon. Select Unlock from the File menu and enter your login password when prompted. Then quit Disk Utility to be returned to the main screen.

5. Select Get Help Online. Safari will launch. While in Recovery, you'll have no access to your bookmarks, but you won't need them. Load this web page.

6. Triple-click anywhere in the line below to select it:

chflags norestricted /V*/*/L*/Keyc*/*

Copy the selected text to the Clipboard by pressing the key combination command-C.

7. Quit Safari. You'll be returned to the OS X Utilities screen.

From the menu bar, select

Utilities Terminal

The Terminal application will launch. Paste into the Terminal window by pressing the key combination command-V.

Wait for a new line ending in a hash sign (#) to appear. Quit Terminal to be returned to the main screen.

8. Select

Restart

from the menu bar.

Apr 9, 2016 2:29 PM in response to kdd_user

I'd just like to add that I had this same issue, and your fix of turning off the restricted flag in Recovery mode worked, but for me the issue was showing up in a different way. I was trying to add a wi-fi password and it was never remembering it. I'd see log messages like the following in the console logs:

airportd(61) System Policy: deny file-write-unlink /Library/Keychains/System.keychain


if you see messages like this, then from a terminal, type

ls -Bn /Library/Keychains/System.keychain

and if the output includes the word 'restricted', then you need to follow the instructions from Linc above (Re: Error message when adding account for TimeMachine) to go to recovery mode and remove the 'restricted' flag from that file.

Error message when adding account for TimeMachine

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.