Suspicious Entry in Sharing and Permissions list

Question

Suspicious Entry in Sharing and Permissions list

I have an iMac 27in-(mid 2011) 3/4 GHz Intel Core i7, 16 GB memory. While prepping for a new SSD installation, I was looking at my System and Library folders and noticed an unusual group listed in the Share/Permissions list. The group is listed as 'Wheel' and has 'Read Only' privileges in the System and Library folders, but no other areas that I have found. I have attempted to remove it from the list , but am denied completing the action – I get a text box stating : The operation can’t be completed because you don’t have the necessary permission. I get this even though I have unlocked the padlock (signing in as the administrator). I have also tried signing in with the admin account, but no joy.

This entry is on the Share/Permissions list is evident on both my iMac and my wife's MacBookPro, both linked on the same LAN. Has anyone run into this similar situation? How did you rid yourself of the unwanted 'share'? Should I be concerned that someone is listed for a free read?

greger

iMac, Mac OS X (10.6.8), 3.4 GHz Intel Core i7

Posted on Apr 26, 2017 5:07 PM

Reply

Answer 1

Drew Reece

Level 6

10,684 points

Apr 26, 2017 5:33 PM in response to greger-seattle

Wheel is part of the Unix layers of OS X / Mac OS. It is the group that has the ability you use sudo or gain access via su. You can find explanations if you search "what is wheel group on Mac"

https://superuser.com/questions/191955/what-is-the-wheel-user-in-os-x

What is a "wheel" user , and do I need it?

I suggest you avoid altering permissions if you do not know why they are set, it can leave the OS unstable or in unbootable states. Disk Utility can repair permissions on OS's before 10.12, run that to undo any changes you may have applied. On 10.12 I believe you need to repair permissions manually in Terminal via recovery mode. Updates & installers will generally fix permissions so you could wait (or reinstall the OS after backing up).

Reply

Answer 2

Drew Reece

Level 6

10,684 points

Apr 26, 2017 6:36 PM in response to Drew Reece

It turns out 10.11 also removed repair permissions so Disk Utility will only repair them below El Capitan.

Reply