Batchmod mac plus#

They also explain why doing anything with special folders isn’t straightforward. In the case of ACLs on your Home folder, they could cause normal operations like creating or deleting a custom folder to go wrong. You’ll also find this propagates to all your standard folders within that, such as Documents, but not to the folders you’ve created inside those.īefore you wonder what this has to do with you, like all access controls, sometimes they get fiddled with or go wrong and stop working in the way that you expect. In this case, it prevents those in the everyone group from deleting that directory, which is handy protection for a Home folder to have. Where that second line is the ACE (Access Control Entry) in its ACL. To discover the additional restrictions placed on your Home folder, you’ll need to use a command likeĭrwxr-xr-x+ 106 hoakley staff 3392 10 Feb 14:59 /Users/hoakley

Only the Finder can’t tell you any more than that. You probably haven’t noticed it, but custom access is relatively recent, and indicates that, in addition to regular POSIX permissions, access to your Home folder is controlled by an ACL. In the lowermost section Sharing & Permissions, it should state that you have “custom access”, while confirming that you have Read & Write privileges. Select your Home folder, for example, and Get Info on it.

For those we have to turn to ACLs, Access Control Lists, which have been supported in OS X since 10.4, but have been little used until recently. That lacks control over important subtleties, which could limit who can list folder contents, change extended attributes, permissions and ownership. Each file and directory has settings for its owner, group, and everyone else, which determine whether they can read, write or (where appropriate) execute that item. Actually as written, those commands will act on all mounted volumes, but that should do no harm.Regular POSIX (Unix) permissions are crude controls. They do not change any ownerships or change any permissions that should not normally be in effect anyway. With respect to the locked system volume in Target Disk Mode, I think it would be OK to run V.K.s Terminal commands. What about the contents of the disk? Can you access everything? Are there any folders there with red 'no entry ' badges? At this point, though, you have a functioning system and it might well be prudent to leave well enough alone. I don't know if such an access 'patch' could somehow increase the chance of some problem down the road, which might be avoided if instead you correct the ordinary permissions to what they should be, obviating the need for the ACL. WORKED! I'm back in!Ĭommand again, you will likely find that the previously messed-up ownership and permissions are still messed-up, and that there is now a new ACL that overrides them, giving you access.

Batchmod mac plus#

So, he had me just unlock it, hit the plus button, and add my username. Then assuming from your Terminal posting that your current admin username is 'leahnlaw', I would set up BatChmod this way and click Apply: To do this, you could drag the icon of the volume in question into BatChmod's field to the right of 'File.'. I would try first just on the volume itself, without checking the box for 'Apply to enclosed folders and files.' I think it is OK to try BatChmod as you had planned. With regard to the zero K size, that might be just a consequence of your lack of permission to read/search the volume - we don't know yet what is actually there. Well, I'm not a Unix expert, but I see a number of problems-ġ) There is a strange ACL - I don't know where the long string '40C0.' came from.Ģ) No one has directory 'search' permission (the x-bit is not set)ģ) The owner and group owner are listed by number (502) rather than by name, which means that there is currently no user or group with those UID/GID numbers. Lawrence-Ingrams-Mac-Pro:~ leahnlaw$ ls /Volumes/Archiveĭrw-rw-r-+ 19 502 502 - 714 Apr 20 12:43 /Volumes/ArchiveĠ: 40C0F312-42F5-4FCF-9D28-A2D91B031ED7 allow list,add_file,add_subdirectory,readattr,writeattr,readextattr,writeextattr,read security