com.apple.safari operation not permitted

Stack Exchange Network

Stack Exchange network consists of 183 Q&A communities including Stack Overflow , the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Q&A for work

Connect and share knowledge within a single location that is structured and easy to search.

Operation not permitted

I am trying to delete files from trash on my MacBook. I have tried to remove with:

Can not remove all files from Trash in OS X

But I get Operation not permitted error

Any help is appreciated.

• What you are trying to do is empty at the same time your own Trash / Recycle Bin and the system's. Some items may have been marked for deletion pending a reboot by the OS, but they will be deleted at its discretion, not yours. What happens if you just try a "sudo rm -rf ~/.Trash"? –  user1019780 Jun 11, 2020 at 11:23
• @Didier Still the same rm: /Users/Admin/.Trash/2e4/SafariFamily: Operation not permitted rm: /Users/Admin/.Trash/2e4/com.apple.Safari/SafariFamily: Operation not permitted rm: /Users/Admin/.Trash/2e4/com.apple.Safari: Directory not empty rm: /Users/Admin/.Trash/2e4/SafariFamily: Operation not permitted rm: /Users/Admin/.Trash/2e4/com.apple.Safari/SafariFamily: Operation not permitted rm: /Users/Admin/.Trash/2e4/com.apple.Safari: Directory not empty –  NathanGL Jun 11, 2020 at 11:37
• OK, this explains that: you're trying to permanently delete a file related to a preinstalled application (Safari). macOS won't allow that, not even in Recovery Mode, unless you disable System Integrity Protection first (sudo csrutil disable), reboot in normal mode, and use the commands you've already used in Terminal. Is there a reason why you tried to uninstall Safari in the first place? –  user1019780 Jun 11, 2020 at 13:38
• Thanks, @Didier turned off System Integrity Protection and can delete it now. Well, I couldn't uninstall Safari so I tried removing it totally and that happened. It simply didn't work for me. –  NathanGL Jun 11, 2020 at 19:54
• You're not supposed to uninstall Safari. It's part of macOS, same Internet Explorer is/was part of Windows. Only way to totally and cleanly uninstall it is via a third-party like AppCleaner, but it's not recommended at all. Glad you solved your problem, though. –  user1019780 Jun 11, 2020 at 22:02

You must log in to answer this question.

Browse other questions tagged macos sudo rm trash ..

• The Overflow Blog
• Want to be a great software engineer? Don’t be a jerk.
• Climbing the GenAI decision tree sponsored post
• Featured on Meta
• New Focus Styles & Updated Styling for Button Groups
• Upcoming initiatives on Stack Overflow and across the Stack Exchange network
• Google Cloud will be Sponsoring Super User SE

Hot Network Questions

• What is the purpose of this "add with carry" adc instruction (x86)?
• First mention of Einstein in Science Fiction?
• A false "proof" that record setting events are dependent
• What's the most common word in Latin?
• No stomach, how do I eat?
• To what extent can citizens of democracies be held responsible for the acts of their governments?
• Does the book of Revelation teach that all miracles during the end times will be of Satan?
• What do I do if my players are acting in a way that is meta-gaming and are refusing to accept my decision?
• Is this a sane (as in lacking UB) implementation of a ref-counted subscription cleanup?
• Do intutionists think the law of the excluded middle is universally, metaphysically false?
• Space before superscript and Subscript
• Why isn't there financial safety if I am arrested illegally?
• How Long Will Boeing Keep the 737 in Production?
• Paper authorship conflict: Advisor wants his name on a research paper he didn't contribute to
• Why is a peak in the gain a sign of instability in a closed loop op-amp circuit?
• The rotation symmetry group and the reflection group: Is there a name for what they have in common?
• Stochastic boundedness in consistency proof
• Cheapest unstoppable, mandatory infinite loops in Magic the Gathering
• Detailed derivation for the log likelihood of a logistic multinomial model
• What is SpaceX doing differently with their Falcon 9 so that it doesn't cost as much as the Space Shuttle?
• Can I make attacks non-lethal?
• Why does a 1:1 transformer preserve voltage?
• What is a safe way to transport ebike battery on planes?
• I need a word for the atmosphere between two people

Tips & Tricks

Troubleshooting, fix terminal “operation not permitted” error in macos sonoma, ventura, monterey, big sur, catalina, mojave.

If you’re a Mac command line user you may have noticed that many frequently used commands entered into the Terminal (or iTerm) result in an “Operation not permitted” error message since updating to MacOS Mojave 10.14 or later, including Sonoma, Ventura, Monterey, and Big Sur. The “Operation not permitted” error in the Terminal can be seen after issuing even simple commands like using ‘ls’ ‘mv’ and ‘cp’ within the users own directory, but also in many other directory locations on the Mac, and when trying to use many defaults commands. Obviously this type of error message makes navigating and using the command line in MacOS to be quite difficult if not impossible for many purposes. Don’t worry, the Terminal is not broken in new MacOS versions.

This walkthrough will show you how to fix “Operation not permitted” error messages seen at the command line in Terminal for Mac OS in Mojave 10.14 or later.

How to Fix “Operation not permitted” Error in Terminal for Mac OS

• Pull down the  Apple menu and choose ‘System Preferences’
• Choose “Security & Privacy” control panel
• Now select the “Privacy” tab, then from the left-side menu select “Full Disk Access”
• Click the lock icon in the lower left corner of the preference panel and authenticate with an admin level login
• Now click the [+] plus button to add an application with full disk access

• Navigate to the /Applications/Utilities/ folder and choose “Terminal” to grant Terminal with Full Disk Access privileges

• Relaunch Terminal, the “Operation not permitted” error messages will be gone

If you have not encountered the “Operation not permitted” error message in the Terminal of MacOS (Mojave 10.14 or later) yet, then it’s likely because you haven’t wandered into a directory or file path that has the additional access restrictions (or that you don’t use Terminal, in which case this entire article is not for you).

While many of the various core System and root directories will throw error messages in macOS Terminal too, you can also find the error message even when trying to work in the users own Home directory, including in many of the user ~/Library/ folders, like ~/Library/Messages ( where iMessage attachments and chat logs are stored in Mac OS) and ~/Library/Mail/ (where user-level mail plugins , mailbox data , and other Mail app data is stored), and many others.

You can test this yourself, before and after making the settings adjustment outlined above with a simple command like using ls on one of the protected folders:

ls ~/Library/Messages

If Terminal does not have Full Disk Access granted, you will see the “Operation not permitted” error message.

If Terminal does have Full Disk Access granted, or if SIP is disabled, you will not see that error message in the MacOS Terminal.

In case you were wondering, yes that does mean there are actually two ways to fix the “Operation not permitted” errors you may encounter in MacOS Terminal; the first which we detail here is rather simple that grants additional access privileges to Terminal app, and the other is a bit more dramatic which involves disabling System Integrity Protection on the Mac which is generally not recommended and we won’t specifically cover here, though simply disabling SIP and rebooting is typically enough to make the error go away if you’d rather go that route.

The “Operation not permitted” message is one of a variety of command line errors you may encounter in Mac OS Terminal. Another frequently seen command line error is the the “command not found” error message which can also be encountered in the Terminal for MacOS for a variety of different reasons as well.

If you have any other tips, tricks, suggestions, or thoughts about the command line in MacOS or this particular error message, share with us in the comments below.

Enjoy this tip? Subscribe to our newsletter!

Get more of our great Apple tips, tricks, and important news delivered to your inbox with the OSXDaily newsletter. 

You have successfully joined our subscriber list.

Related articles:

• MacOS Monterey Problems – Fixing Issues with macOS 12
• Troubleshooting macOS Sierra Problems
• How to Fix Cron Permission Issues in macOS Big Sur, Catalina, & Mojave
• Get the macOS Big Sur Default Wallpapers

76 Comments

» Comments RSS Feed

I also toggled `sshd-keychain-wrapper` to allow SSH incoming sessions to see my Mac’s ~/Downloads/ folder. Thanks to https://superuser.com/questions/1615072/getting-an-operation-not-permitted-error-when-running-commands-after-to-sshing for details.

THANK YOU. In 2024, this answered my question after reading COUNTLESS apple support threads without finding a resolution. In the new OS system it’s much easier to navigate to the Full Disk Access, and I had to add “Disk Utility” to the application list so I could create a read-only image of my Time Machine backups. I am wholly grateful.

thank you, it worked for me.

Thanks for this article, very helpful :- )

Thanks for this it worked!

Enable [Full Disk Access] “Terminal” solve the issue!

Thankyou, it worked for me :)

I got this issue once randomly. I realized what happened was i had deleted and then re-added the directory i was working in in another terminal session so the terminal window inside my IDE was “lost”. Just backed out of the directory and then back in and all was well :)

You saved my day. Thank you!

That helps! Thanks.

awesome saved my life, for me it worked with single quotes on Application Support folder: sudo ln -s /Volumes/WDeasy/iOS/Backup ~/Library/’Application Support’/MobileSync

It worked for me. Thanks a lot!

thanks a lot !

Thx for the help!

Thank you so much for posting this clear and concise fix.

Phew! This worked! Thanks

Allowing the terminal app full disk access was not enough. I had to unselect the firewall (F-secure Save app) option “Viruses and Threats>Files and apps can be blocked on their internet reputation”

After doing that, the shell scripts worked as expected.

I found that virtual box running ubuntu could do stuff sroot on terminial on macos could not WTF. But that does mean I have a separate spot to go whenever there is a problem without having to open terminal up for ALL users ( IE me when am just mis-typing)

This works like charm! Thank you

A million thanks worked perfectly!!!

work like a charm, thanks for safe my days

Thanks, hint about how to give Terminal full disk access saved my day

Remember when Apple’s slogan was “it just works”? That was nice.

thx a lot I had to give permission to the terminal in order to use a dd command to clone a HDD drive

that’s really helpful, thanks very much!

This fixed my problem under macOS 11.2.2. Until now, I never encountered such a problem. Thanks.

Still impossible to issue rm commands

Thank you so much. Helped fix my error related to XCode not recognizing my modules and not being able to open one of the files associated to the modules. Much thanks!

Cheers, Derek

Just fixed this problem for the following scenario in Catalina. I have a backup script that runs from /etc/daily.local and therefore needs full disk access. The /etc/{daily,weekly,monthly}.local scripts are run by “periodic”, so you’d think dragging /usr/sbin/periodic to “Full Disk Access” under System Preferences > Security & Privacy would work. No, it turns out that “periodic” is run by /usr/libexec/periodic-wrapper and that’s the program that has to be given Full Disk Access.

Figured that out by having daily.local run a program called “treeps.pl” that puts out a tree-oriented process list. From that, you can work back up the tree to see who ran “daily.local”. You can find treeps.pl here: https://apple.stackexchange.com/questions/11770/linux-ps-f-tree-view-equivalent-on-osx (search for “treeps”, not “pstree”).

I hope I stuffed enough good keywords in there to save someone the time it took me to track that down!

This may be helpful if you are trying to replicate the tree command on Mac too:

https://osxdaily.com/2016/09/09/view-folder-tree-terminal-mac-os-tree-equivalent/

I upgraded an unsupported machine (MacPro 4,1) to Mojave using the DosDude1.com patch, and now my numerous Ruby scripts won’t work.

First, the Apple-supplied /usr/bin/ruby is ancient. I renamed it /usr/bin/ruby-2.3.7, and did “ln -s /usr/local/opt/ruby/bin/ruby” to link to the Homebrew-installed ruby (version 2.7.2).

That didn’t help, so I change all my scripts to refer to the Homebrew version, by making “#!/usr/local/opt/ruby/bin/ruby” the first line. Still no joy.

When trying to run any ruby script, I get:

/usr/local/opt/ruby/bin/ruby: bad interpreter: Operation not permitted

However, strangely enough, I CAN do “/usr/local/opt/ruby/bin/ruby <MyRubyScript.rb" and it works just fine! (I can simply do "ruby <MyRubyScript.rb" successfully, too.

I have SIP disabled and can do things that SIP would not allow, so I don't think that's the issue.

Been hacking UNIX for nearly 40 years, and this has me stumped.

this worked for me! thank you so much!

Thanks ! it works for me too !

Bonjour j’ai un soucis avec mon terminal je suis mac os Hugh sierra 10.13.6 je voudrais faire reconnaitre ma carte USB wifi a partir de mon terminal avec cette instruction sudo /Applications/TextEdit.app/Contents/MacOS/TextEdit /System/Library/Extensions/RT2870USBWirelessDriver.kext/Contents/Info.plist demandant mon mot de passe administrateur après mon mot de passe il écrit Illégal instruction:4 que faire

Just like Jeff and Marius before me I couldn’t get rid of the ‘Operation not permitted’ error despite following these instructions.

Is there anything else I can try?

What worked for me at the end was to add “/bin/bash” to the list of Full Disk Access. (After hitting “+” in Step 5 above, hold “Cmd-Shift-G” and type “/bin”, then click on “bash”.)

I have seen the posts about “how to add users to the sudoers list”, but if I have no sudoers, I can’t execute any SUDO commands. Ho can I add a sudoer without using terminal “sudo” command.

Thanks Paul, Terminal in OSX is working now, but when SSH to mac it still says Operation Not Permitted when listing some directories. Tried adding /bin/ssh and sbin/sshd if I remember correctly still same problem. Any clues? Thanks!

Thank you for this tip, was very helpful and easy. I ran in to this issue after updating to Catalina and it helped me. I was getting below error and it is fixed now.

XXX-MacBook-Pro:Downloads root# ls -l ls: .: Operation not permitted

Thanks so much for posting this and making it very easy to understand, it helped fix my problem on my own Mac, as well as my mom’s MacBook. It’s so great to have forms like this to help fix problems that Apple has made.

Glad this could help you resolve your issue with “Operation not permitted” errors in MacOS, thanks for reading! This applies to Catalina too.

Gracias, i was facing the issue after i upgraded to Mac OS Catalina, and ur fix worked for me.

Thanks for publishing the solution. It solved my problem.

I can confirm what Jeff said. After adding Terminal to the Full Disk Access List, and restarting it (even rebooting), I still see:

myprompt:~$ cd /usr myprompt:/usr$ sudo chown myuser:staff local/ Password: chown: local/: Operation not permitted myprompt:/usr$

This doesn’t appear to work for certain files or folders. After giving full disk access to Terminal, as described, and restarting Terminal:

Jeffs-MacBook-Pro-2:~ jeffsidell$ cd /usr/bin Jeffs-MacBook-Pro-2:bin jeffsidell$ sudo mv python python2.7.10_JPS_mv_python Password: mv: rename python to python2.7.10_JPS_mv_python: Operation not permitted

I do NOT want to give terminal full disk access for ALL users. I want to give terminal full disk access ONLY for root. Is there a way to do that?

Thanks budy, this really solved my terminal issues with “Operation not Permitted”.

Great tutorial.

I did the first few steps but I can’t find the Full Disk Access option. Help

Same here can’t find the Full Disk Access. Help us :(

Couldn’t also find the Full Disk Access.

Hi, I have put a file into my trash. When I try to empty the trash, it says I dont have permission. So I right-clicked on the file to Get info and give permission to “read and write” the file. But, when I do the Get info, it says in the Sharing and permission section (below) “You have no permission”. How do I fix that problem ? How do I force delete a file that does not want to be deleted ?

First you could try emptying the trash securely. [Finder->Secure Empty Trash…].

If that doesn’t work, go to the terminal and navigate to the trash folder. It will probably be in [/Users/your_user_name/.Trash].

So, “cd /Users/your_user_name/.Trash” ls -l (see if your file is listed) rm -iv “your_file_name” Answer “remove your_file_name?” with a “y” and it should be gone. You may have to add “sudo” to the beginning, as in: sudo rm -iv “your_file_name” Authenticate with admin password. Answer with “y”

If that doesn’t work, you will have to disable SIP (System Integrity Protection)

I had the same problem. Like stargood said, you probably have to disable SIP (see link in this article). This should let you delete the files. Don’t forget to turn it on afterwards, if you don’t explicitly need it off.

For anyone writing a shell script that’s run by `cron`, e.g. you use `rsync` in a script to backup your files on another server…

You will notice that adding “Terminal.app” to the “Full Disk Access” does not work, because cron does not use “Terminal.app”.

Now you could grant “Full Disk Access” access to the `rsync` program, and that solves some of the permission problems, but this is not enough if you need access to:

~/Pictures/Photos Library.photoslibrary ~/Library/Application Support/AddressBook

Instead, you should add `cron` to “System Preferences > Security & Privacy > Full Disk Access”.

I did this by running `open /usr/bin/`, which opened a Finder window that allowed me to easily drag/drop the `cron` program into the “Full Disk Access” list.

After one year your post saved my scripts life ;)

After 1.5 years, this helped resolve my issue as well. Thanks.

If you expect “security” and “privacy” in a closed source operating system, you’re a lost cause anyways. If you aren’t even allowed to understand how your online banking balance was being rendered on your screen, you should overthink your ways. Remember: If the number on your online banking page is all wrong, you’re going to starve. So this isn’t some “minor thing only nerds should care about”. Security in Mac OS X. Pff.

These new “security” features and alerts of 10.14 are nothing more than annoying and unnecessary tactics to trick fools into believing they’re safe. Apple calls these things “features”, but for skilled administrators those are nothing more than “bugs”, simply put. Because they break stuff. Render it unusable, unless intervened.

After having migrated from an earlier macOS/Mac OS X release to 10.14, you’ll find your Macintoshes automation techniques struggling hard. In order to get your deserted Mac up and running again, I suggest the following:

1. Open up System Preferences.app, navigate to “Security & Privacy” > “Privacy” > “Full Disk Access” 2. Press option & command & spacebar, this should open up a spotlight window 3. Enter “kind:application” into the search field 4. Drag every result from that window into the “Full Disk Access” list in System Preferences 5. Open up a terminal 6. “$ echo $PATH” 7. open up every path from that, e.g. a default 10.14 install will say “/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin” by using “$ open”. So “$ open /usr/local/bin” and then “$ open /usr/bin” and so on and so forth. 8. Drag every executable in these folders into the “Full Disk Access” list in System Preferences (9). Bonus: Repeat these steps with the “Accessibility” tab to get rid of those alerts/breakages as well.

Doesn’t fix every annoyance, as it won’t mute alerts that will pop up from applications and executables you’ll install in the future, but it is a step forward. And please don’t give me crap about how I lure users into doing “dangerous” things. Keep your security hysteria to yourself. If Mac OS X managed to strive without a malware epidemic from 2001 until now, it will continue to do so, even if you enable the “evil evil” disk access.

I’m critically fed up with Apple in 2018. We’re reaching idiocy and greed levels that shouldn’t be possible.

Rather than complaining and moaning, why don’t you simply disable System Integrity Protection? It takes like two minutes, tops. *eyeroll*

Is there a list of “restricted” directories?

This is really disappointing to hear. I was on a Windows machine the other day and couldn’t delete a file. Tried using the command line as admin and various applications. It made me think about why I prefer Mac over windows, one of the reasons being that I (the user) have complete control over the OS. Guess Apple is now deciding that after almost 20 years of macs running OS X that users shouldn’t have access to one of the core features- the unix/bsd base system.

It’s not that big of a deal as you can see this is an easy fix to gain the additional privileges to unix Terminal on Mac.

Until you access your Mojave system via SSH and face a whole new raft of permission wrangling headaches. Mojave has been a real disappointment. Apple Server app lost DHS, DHCP, Mail, Web…pretty much everything you’d use a server for, permissions/access are now so walled off it’s a constant game of access whack-a-mole.

All the while trying to keep users happy :(

Until you need to manage your system remotely, and now you need to add sshd to the list too. This will turn into security whack-a-mole :(

more Apple stupidity! Why do they not listen to users! Each and every update continues to hobble and restrict the OS to something completely useless and unusable by anyone with significant skill! Take your crap OS APPLE and keep making it utterly useless! Moving on to real operating systems from Red Hat, Windows were users can still actually accomplish work and configure systems as needed!

Good luck trying to sell anything you stick a PRO label on with an OS this useless

Since upgrading to Mojave, when trying to run flush.app flash cookie remover, I get an error message:

Not authorized to send Apple events to Terminal (-1743)

Another reason not to upgrade?

Looks like crApple is charging ahead with converting all OS’s to iPads where users have ZERO control over their devices because computers are now considered AD delivery and tracking devices and users are captive audiences.

Thanks for the pictorial representation.. this really helped me to solve my issue. Thanks a lot.

Thanks! this also solves issues with Macscan and PrivacyScan. add these to the applist too!

Granting apps full disk access has potential for problems, with Terminal it makes sense if you are a terminal user but for others it’s not a good idea to randomly add apps to that list. This is a protection mechanism in new macOS.

That makes me wonder, what is MacScan and PrivacyScan? What do they claim to do and what makes them? Be wary of junk cleaner apps that aren’t needed by the Mac. Be wary of apps that claim to scan or clean anything, they’re usually junkware trying to put more junk and tracking on your Mac.

Strict Gatekeeper settings and privacy settings, only trusted source apps, Malwarebytes free edition, regular web browser cache and cookie removal, some of the ObjectiveSee apps, that’s really all you should need on a Mac if anything at all. Don’t download sketchy stuff from anywhere and that alone prevents most problems on Mac.

Does this happen even if you are root? I currently don’t have a machine capable of running Mojave so cannot test this. But from the sounds of thing, Apple is making their OS like their hardware, unable to open or look inside anymore.

Yes, it happens even if you are root. Apparently Mojave adds additional “protections” above and beyond the Unix/Posix security model. I wonder if Apple can still claim they are “Unix” under these conditions.

I have a cron job that runs rsync to backup my home directory to another machine. Since Mojave I’m always getting errors from it. I can run it fine from Terminal because I gave full disk access to Terminal, but I haven’t found a way to give permission to cron or rsync, which are plain unix executables. I believe you can only give permission to apps. Any advice?

I Don’t have a solution for you, but this is the sort of crap from Apple that keeps me from updating/upgrading… Tim Cook assumes that all Apple users are all brain dead morons.

I was able to add /usr/sbin/cron in the same way as /Applications/Utilities/Terminal.app

The issue I have isn’t the Terminal getting that message; but the Finder, when manually copying files from one tab to another in the same Finder Window. If in two separate windows, it works; but when the Dock PreferencePane’s “Prefer tabs when opening documents” is set as Always, I get the error. Anyone experience this and any solutions? I could in theory add the Finder.app found in /System/Library/CoreServices; but this is a very risky kludge and not a valid solution.

Leave a Reply

Name (required)

Mail (will not be published) (required)

Subscribe to OSXDaily

• - 3 Mac Tips for Working with International Teams
• - How to Disable ChatGPT Chat History & Training Data Usage
• - What Does the Bell with Line Through It Mean in Messages? Bell Icon on iPhone, iPad, & Mac Explained
• - How to Convert MOV to MP4 on Mac Free with ffmpeg
• - How to Use ChatGPT-4 for Free with Microsoft Edge
• - MacOS Ventura 13.6.6 & Safari 17.4.1 Update Available
• - Using M3 MacBook Air in Clamshell Mode May Reduce Performance
• - First Beta of iOS 17.5, macOS Sonoma 14.5, iPadOS 17.5 Released for Testing
• - iOS 16.7.7 & iPadOS 16.7.7 Released for Older iPhone & iPad Models
• - WWDC 2024 Set for June 10-14, Expect iOS 18, macOS 15, visionOS 2, etc

iPhone / iPad

• - Fix a Repeating “Trust This Computer” Alert on iPhone & iPad
• - Create a Resume with Pages on Mac, iPhone, iPad
• - How Secure are Personal Hotspot Connections from iPhone?
• - You Can Play Flappy Bird in the Mac Finder
• - Fix “warning: unable to access /Users/Name/.config/git/attributes Permission Denied” Errors
• - How to Fix the Apple Watch Squiggly Charging Cable Screen
• - NewsToday2: What it is & How to Disable NewsToday2 on Mac
• - Why Did My iPhone Alarm Stop Automatically & Turn Itself Off?

About OSXDaily | Contact Us | Privacy Policy | Sitemap

This website is unrelated to Apple Inc

All trademarks and copyrights on this website are property of their respective owners.

© 2024 OS X Daily. All Rights Reserved. Reproduction without explicit permission is prohibited.

Want to highlight a helpful answer? Upvote!

Did someone help you, or did an answer or User Tip resolve your issue? Upvote by selecting the upvote arrow. Your feedback helps others!  Learn more about when to upvote >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

The operation couldn't be completed. Operation not permitted. (NSPOSIXErrorDomain:1)

I get the following message frequently: "The operation couldn't be completed. Operation not permitted. (NSPOSIXErrorDomain:1)". I need to restart the computer inorder to access the internet. I connect via wireless and other wireless items on the network don't have this issue.

iMac, Mac OS X (10.6.8)

Posted on Apr 20, 2012 10:53 AM

Loading page content

Page content loaded

Apr 20, 2012 12:29 PM in response to Cliff_Loobs

Hi Cliff ...

Do you have Intego Virus Barrier installed >>> https://discussions.apple.com/thread/3128522?start=0&tstart=0

Apr 20, 2012 1:59 PM in response to Cliff_Loobs

Please read this whole message before doing anything.

This procedure is a diagnostic test . It won’t solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.

Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software — potentially for the worse. The following procedure will help identify which such modifications you've installed. Don’t be alarmed by the complexity of these instructions — they’re easy to carry out and won’t change anything on your Mac.

These steps are to be taken while booted in “normal” mode, not in safe mode. If you’re now running in safe mode, reboot as usual before continuing.

Below are instructions to enter some UNIX shell commands. The commands are harmless, but they must be entered exactly as given in order to work. If you have doubts about the safety of the procedure suggested here, search this site for other discussions in which it’s been followed without any report of ill effects.

Some of the commands will line-wrap or scroll in your browser, but each one is really just a single line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then either copy or drag it. The headings “Step 1” and so on are not part of the commands.

Note: If you have more than one user account, Step 2 must be taken as an administrator. Ordinarily that would be the user created automatically when you booted the system for the first time. The other steps should be taken as the user who has the problem, if different. Most personal Macs have only one user, and in that case this paragraph doesn’t apply.

Launch the Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U . The application is in the folder that opens.

☞ If you’re running Mac OS X 10.7 or later, open LaunchPad. Click Utilities , then Terminal in the page that opens.

When you launch Terminal, a text window will open with a line already in it, ending either in a dollar sign (“$”) or a percent sign (“%”). If you get the percent sign, enter “sh” (without the quotes) and press return . You should then get a new line ending in a dollar sign.

Copy or drag — do not type — the line below into the Terminal window, then press return :

Post the lines of output (if any) that appear below what you just entered (the text, please, not a screenshot.)

Repeat with this line:

This time, you'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning not to screw up. You don't need to post the warning.

Important : If you synchronize with a MobileMe account, your me.com email address may appear in the output of the above command. If so, anonymize it before posting.

Remember, steps 1-5 are all drag-and-drop or copy-and-paste, whichever you prefer — no typing, except your password. Also remember to post the output.

You can then quit Terminal.

May 1, 2012 1:11 PM in response to Linc Davis

Thank you for the more than complete instructions to aid in solving the issue. Key was your statement concerning third-part modifications. Thinking back I realized that issue was coicidental with my having installed Norton Antivirus (free from Comcast). I deactivated that, moved it to trahs and went back to iAntiVirus. Problem gone!

Thanks again.

Dec 6, 2012 6:01 PM in response to Linc Davis

I have the same issue. Here is the output:

localhost:~ darwin.bloch$ kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'

com.netboxblue.kext.nbnke (1.0)

localhost:~ darwin.bloch$ sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|edu\.mit|org\.(amavis|apache|cups|isc|ntp|postfi x|x)/{print $3}'

com.microsoft.office.licensing.helper

• com.jamfsoftware.task.Every
• com.jamfsoftware.jamf.daemon
• com.adobe.SwitchBoard

localhost:~ darwin.bloch$ launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'

com.google.keystone.user.agent

• com.promethean.flashextension
• com.promethean.activmgr
• com.promethean.activhardwareservice
• com.netboxblue.agent.NBNotifier
• com.jamfsoftware.jamf.agent
• com.spotify.webhelper

localhost:~ darwin.bloch$ ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta} * L*/Fonts 2> /dev/null

/Library/Components:

/Library/Extensions:

/Library/Frameworks:

• AECore.framework

AEProfiling.framework

AERegistration.framework

Adobe AIR.framework

• AsVisualPresenter.framework

AudioMixEngine.framework

• Compressor.framework

DivX Toolkit.framework

• FxPlug.framework
• MediaServerAPI.framework
• Motion.framework

NyxAudioAnalysis.framework

PluginManager.framework

• ProFX.framework
• ProMetadataSupport.framework
• Qmaster.framework

VisualPresenter.framework

• iLifeFaceRecognition.framework
• iLifeKit.framework
• iLifePageLayout.framework
• iLifeSQLAccess.framework
• iLifeSlideshow.framework

iTunesLibrary.framework

/Library/Input Methods:

/Library/Internet Plug-Ins:

• AdobePDFViewer.plugin
• DivXBrowserPlugin.plugin

Flash Player.plugin

JavaAppletPlugin.plugin

OVSHelper.plugin

Quartz Composer.webplugin

QuickTime Plugin.plugin

• SharePointBrowserPlugin.plugin
• SharePointWebKitPlugin.webplugin

flashplayer.xpt

• iPhotoPhotocast.plugin
• nsIQTScriptablePlugin.xpt

/Library/Keyboard Layouts:

/Library/LaunchAgents:

• com.adobe.AAM.Updater-1.0.plist
• com.jamfsoftware.jamf.agent.plist
• com.netboxblue.agent.NBNotifier.plist
• com.promethean.activhardwareservice.plist
• com.promethean.activmgr.plist
• com.promethean.flashextension.plist

/Library/LaunchDaemons:

• com.adobe.SwitchBoard.plist
• com.jamfsoftware.jamf.daemon.plist
• com.jamfsoftware.startupItem.plist
• com.jamfsoftware.task.3.plist
• com.microsoft.office.licensing.helper.plist

/Library/PreferencePanes:

Apple Qmaster.prefPane

DivX.prefPane

Flash Player.prefPane

/Library/PrivilegedHelperTools:

/Library/QuickLook:

• GBQLGenerator.qlgenerator

iBooksAuthor.qlgenerator

iWork.qlgenerator

/Library/QuickTime:

• AppleHDVCodec.component

AppleIntermediateCodec.component

AppleMPEG2Codec.component

AppleProRes422.component

• DVCPROHDCodec.component
• DVCPROHDMuxer.component
• DVCPROHDVideoDigitizer.component
• DVCPROHDVideoOutput.component
• DVCPROHDVideoOutputClock.component
• DVCPROHDVideoOutputCodec.component
• DesktopVideoOut.component

DivX Decoder.component

DivX Encoder.component

FCP Uncompressed 422.component

• IMXCodec.component
• LiveType.component
• Motion.component

/Library/ScriptingAdditions:

Adobe Unit Types.osax

/Library/Spotlight:

Microsoft Office.mdimporter

iBooksAuthor.mdimporter

iWork.mdimporter

/Library/StartupItems:

/etc/mach_init.d:

IIDCVideoAssistant.plist

VDCAssistant.plist

/etc/mach_init_per_login_session.d:

/etc/mach_init_per_user.d:

com.adobe.SwitchBoard.monitor.plist

Library/Fonts:

Library/Frameworks:

Library/Input Methods:

Library/Internet Plug-Ins:

Library/Keyboard Layouts:

Library/LaunchAgents:

• com.google.keystone.agent.plist
• com.spotify.webhelper.plist

Library/PreferencePanes:

localhost:~ darwin.bloch$ osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null

UNKNOWN, iTunesHelper, uTorrent, Spotify

Dec 6, 2012 8:49 PM in response to dazbob

You're using Torrents. That in itself makes you vulnerable to all kinds of chaos.

If, after deleting Torrents, you still crash and want help, please post your own new topic here.

Sep 21, 2016 12:28 PM in response to Cliff_Loobs

I got this error when I was trying to open a local HTML file using Safari (v9.1.3) on my local machine (OSX 10.11.6) that I created using a number of tools (RStudio v0.99.902) so it's not likely that there is malicious stuff in the file. I have generated multiple versions of this HTML file previously and opened it with Safari without problems. Then I got the "Operation not permitted". Just, now, I tried to reopen the same HTML with a different browser, and I did NOT get the error. Today, I tried to open the exact same HTML file with Safari and no error occurred.

Below are my results running the Unix code suggested.

I suspect that some fortinet protection code caused this error. Since Fortinet (FortiClient v 5.4.1.514) is updated frequently, it seems likely that a "bug" that was introduced has since been fixed.

$ kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'

com.fortinet.fct.kext.fctapnke (1)

com.fortinet.fct.kext.avkern (1.0.1)

$ sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|edu\.mit|org\.(amavis|apache|cups|isc|ntp|postfi x|x)/{print $3}'

com.oracle.oss.mysql.mysqld

com.fortinet.fctservctl

com.fortinet.fctwf

com.fortinet.fctappfw

com.fortinet.fmon

com.oracle.java.Helper-Tool

com.fortinet.fssoagent_launchdaemon

com.adobe.fpsaud

com.fortinet.epctrl

org.macosforge.xquartz.privileged_startx

com.fortinet.fctctl

$ launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'

com.fortinet.fssoagent_launchagent

com.fortinet.FortiClientAgent.148832

com.fortinet.FortiClient.149152

com.bluejeans.app.user.detector

org.gnu.Aquamacs.131872

org.macosforge.xquartz.startx

com.oracle.java.Java-Updater

com.fortinet.FctMiscAgent.150112

$ ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta} * L*/Fonts 2> /dev/null

ATTOCelerityFC8.kext

ATTOExpressSASHBA2.kext

ATTOExpressSASRAID2.kext

ArcMSR.kext

CalDigitHDProDrv.kext

EPSONUSBPrintClass.kext

HighPointIOP.kext

HighPointRR.kext

PromiseSTEX.kext

SoftRAID.kext

R.framework

Default Browser.plugin

Disabled Plug-Ins

FortiClient_SSLVPN_Plugin.bundle

Silverlight.plugin

com.fortinet.forticlient.fssoagent_launchagent.plist

com.oracle.java.Java-Updater.plist

org.macosforge.xquartz.startx.plist

com.adobe.fpsaud.plist

com.fortinet.forticlient.appfw.plist

com.fortinet.forticlient.epctrl.plist

com.fortinet.forticlient.fmon.plist

com.fortinet.forticlient.fssoagent_launchdaemon.plist

com.fortinet.forticlient.servctl.plist

com.fortinet.forticlient.vpn.plist

com.fortinet.forticlient.wf.plist

com.oracle.java.Helper-Tool.plist

com.oracle.oss.mysql.mysqld.plist

org.macosforge.xquartz.privileged_startx.plist

JavaControlPanel.prefPane

MySQL.prefPane

$ osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null

iTunesHelper, SpeechSynthesisServer, FortiClientAgent

Sep 22, 2016 8:00 AM in response to CA-Wind-Rider

You might want to consider starting a new discussion. Since this one is a couple of years old, less people are likely to look at it. A new post would be much more visible. You can link to this one.

Can't Remove SafariFamily

I have recently removed Safari Technological Preview using AppCleaner from https://freemacsoft.net/appcleaner/ .

The issue that I am facing is that there is a residual file named "SafariFamily" (with no extension) that I can't seem to get rid of no matter what i tried.

Dragging the item into the trash would result in the error message:

"The operation can’t be completed because one or more required items can’t be found. (Error code -43)"

Placing the file in a folder, put the folder in trash and trying to empty trash would result in:

"The operation can’t be completed because the item “Folder” is in use."

Using sudo rm on the file results in:

"rm: SafariFamily: Operation not permitted"

I have also tried deleting the item from safe mode as will as using the First Aid in Disk Utility.

Any idea how I can remove it?

• Safari Developer Tools

Not sure if you've found a fix for it yet, but I was having the same issue.

What worked for me is booting into recovery mode and disabling system integrity protection (csrutil disable) and rebooting. Then I used terminal to force empty the trash containing Safarifamily (sudo rm -R <path to file in trash>) You can just simply open the trash in finder and drag the file or parent folder into the terminal, just make sure there is a space after -R

just remember to boot back into recovery mode afterwards and re-enable system integrity protection (csrutil enable)

Thank you, this worked right away!😁

Thanks a ton. This really worked. Pesky files sitting for almost an year got removed today

I have done your direction but terminal didn't work, it wasn't except to type my password although I have been able to write (sudo rm -R and path to file safarifamily in trash)

Help me, please!

Apple Cash Adds Virtual Card Numbers, Enabling Spending at More Merchants

Apple Cash cards now have virtual card numbers, enabling users to securely spend their Apple Cash at merchants that don’t accept  Apple Pay .

This change was included among updates to Apple Cash  terms and conditions  released Tuesday (April 9).

To view their virtual card number, users go to the Apple Cash card in the Wallet app, tap “…”, tap “Card Number” and then authenticate with Face ID, Touch ID or their passcode.

“Use your Apple Cash virtual number to make secure purchases online where Apple Pay isn’t yet available,” Apple said on a  support page .

“Virtual card numbers are a way to keep your payment card information even more secure,” the page added. “For fraud protection, your 3-digit security code changes frequently with usage and over time.”

Users can also set up Safari AutoFill on their iPhone or iPad to easily access their Apple Cash virtual card number; manually enter their virtual card number on their computer; and request a new virtual card number if they suspect fraudulent activity, the support page said. 

In another change to the Apple Cash terms and conditions announced Tuesday, Apple clarified the identity verification requirements to register an Apple Cash Balance to be eligible for federal deposit insurance, noting that  Federal Deposit Insurance Corp.  (FDIC) insurance protects against the failure of  Green Dot Bank , not Apple, as Apple is not a bank and does not hold the funds.

The company also clarified Green Dot Bank’s authority to debit or credit an Apple Cash Balance to correct errors, added information about the dispute process for unauthorized transactions, added information about transfers between an Apple Cash account and Savings available through Apple Card, and added information about cash-like transaction types that are not permitted by Apple Cash.

In another recent development around Apple Cash, it was reported March 6 that Apple unveiled an application programming interface (API) that enables users to see their balances on their Apple finance products .

The FinanceKit API allows developers to fetch transactions and balance information from Apple Card, Apple Cash and Savings with Apple.

In August, Apple said that Apple Card’s Savings account had surpassed the milestone of $10 billion in deposits  made by users since the account’s launch the previous April.

Recommended

Trending news, the big story, featured news, partner with pymnts.

We’re always on the lookout for opportunities to partner with innovators and disruptors.

• a. Send us an email
• b. Anonymous form
• Buyer's Guide
• Upcoming Products
• Tips / Contact Us
• Podcast Instagram Facebook Twitter Mastodon YouTube Notifications RSS Newsletter

Apple Watch Series 9 Drops to New Low Price of $295 on Amazon

Amazon today has discounted the 41mm GPS Apple Watch Series 9 down to $295.20 , from $399.00. This price is only available in the (PRODUCT)RED color, and it's a limited time deal at Amazon so be sure to check out the sale before it's fully claimed.

This is a new all-time low price on this model of the Series 9, beating previous low prices by about $5. Unfortunately, there aren't really any notable Apple Watch deals besides this sale, so you'll need to be sure the 41mm case size with the M/L Sport Band will fit your wrist.

$104 OFF Apple Watch Series 9 (41mm GPS) for $295.20

This version of the Apple Watch features the S9 chip, a brighter display than the Series 8, and a new Double Tap feature. Our full Deals Roundup has more information on the latest Apple-related sales and bargains.

Get weekly top MacRumors stories in your inbox.

Top Rated Comments

The only drawback I can see is that bright red color. Don't know anyone who'd want a watch that color, other than a grade-schooler.

Popular Stories

When to Expect a New Apple TV to Launch

Alleged iPhone 16 Battery Details Show Smaller Capacity for One Model

When to Expect the Next iPad Mini and Low-End iPad Models to Launch

Best Buy Introduces Record Low Prices Across Every 10th Gen iPad

Microsoft Says Windows Laptops With Snapdragon X Elite Will Be Faster Than M3 MacBook Air

Apple Event for New iPads Still Considered 'Unlikely' Following Delays

Google Launches Android Find My Device Network

Next article.

Our comprehensive guide highlighting every major new addition in iOS 17, plus how-tos that walk you through using the new features.

App Store changes for the EU, new emoji, Podcasts transcripts, and more.

Get the most out your iPhone 15 with our complete guide to all the new features.

A deep dive into new features in macOS Sonoma, big and small.

Revamped models with OLED displays, M3 chip, and redesigned Magic Keyboard accessory.

Updated 10.9-inch model and new 12.9-inch model, M2 chip expected.

Apple's annual Worldwide Developers Conference will kick off with a keynote on June 10.

Expected to see new AI-focused features and more. Preview coming at WWDC in June with public release in September.

Other Stories

16 hours ago by Tim Hardwick

17 hours ago by Tim Hardwick

17 hours ago by MacRumors Staff

2 days ago by Tim Hardwick

1 week ago by MacRumors Staff