Hacker News new | past | comments | ask | show | jobs | submit login

This problem is due to the protection, the sandboxing.

Various approaches have been suggested on the online forums, including editing the config files to be more lenient about these protections (the so called "alternative approach" proposed by the poster)

I tried them all, never had any result. I almost gave up, then read about that safe mode reboot suggestion. I have long uptimes and I don't want to bother reopening stuff, so I didn't do it immediately.

But finally I did, and it worked. Based on the timestamp of my blog (http://en.blog.guylhem.net/) I tried that on mar 31, about 1 month ago, and here are the results from the syslog so far (1 month of data after the fix):

    # bzgrep sandboxd /var/log/system.log*|grep deny|sed -e 's/.*bz2://g'|sort|wc
      97    1441   18032
About 97 issues of sandboxing zealousness remain, if we distinct them by removing the PIDs with :

    # bzgrep sandboxd /var/log/system.log*|grep deny|sed -e 's/.*macbookair//g' -e 's/[0-9]*//g' |sort|uniq
    kernel[]: Sandbox: sandboxd() deny mach-lookup com.apple.coresymbolicationd
    .guylhem.org sandboxd[] ([]): Preview() deny file-read-data /Users/guylhem/C/abcdef.jpeg
    .guylhem.org sandboxd[] ([]): Preview() deny file-write-data /Users/guylhem/C/abcdef.jpeg
    .guylhem.org sandboxd[] ([]): QuickLookSatelli() deny file-read-data /Users/guylhem/Desktop/Wolfram Science Summer School   Application_files/.css
    .guylhem.org sandboxd[] ([]): QuickLookSatelli() deny mach-lookup com.apple.PowerManagement.control
    .guylhem.org sandboxd[] ([]): TextEdit() deny mach-lookup com.apple.SystemConfiguration.SCNetworkReachability
    .guylhem.org sandboxd[] ([]): TextEdit() deny mach-lookup com.apple.tsm.portname
    .guylhem.org sandboxd[] ([]): TextEdit() deny system-socket
    .guylhem.org sandboxd[] ([]): VTDecoderXPCServ() deny file-read-data /Users/guylhem/Library/Preferences/.GlobalPreferences.plist
    .guylhem.org sandboxd[] ([]): mdworker() deny file-read-data  /Library/Filesystems/NetFSPlugins ()
    .guylhem.org sandboxd[] ([]): mdworker() deny file-read-data /Library/Filesystems/NetFSPlugins (pre-ls-info fstype:mtmfs fsflag: flags: diag: uti:com.apple.application-bundle plugin:/Library/Spotlight/Application.mdimporter - find suspect file using: sudo mdutil -t )
    .guylhem.org sandboxd[] ([]): mdworker() deny file-read-xattr /Users/guylhem/Library/Application Support/Google/Chrome/Safe Browsing Bloom (pre-plugin fstype:hfs fsflag:D flags:E diag: uti:public.data plugin:internalPlainTextImporter - find suspect file using: sudo mdutil -t )
    .guylhem.org sandboxd[] ([]): mdworker() deny mach-lookup com.apple.PowerManagement.control (import fstype:hfs fsflag:D flags: diag: uti:com.microsoft.excel.xls plugin:/Library/Spotlight/Microsoft Office.mdimporter - find suspect file using: sudo mdutil -t )
    .guylhem.org sandboxd[] ([]): mdworker() deny mach-lookup com.apple.PowerManagement.control (import fstype:hfs fsflag:D flags: diag: uti:org.openxmlformats.presentationml.presentation plugin:/Library/Spotlight/Microsoft Office.mdimporter - find suspect file using: sudo mdutil -t )
    .guylhem.org sandboxd[] ([]): mdworker() deny mach-lookup com.apple.PowerManagement.control (import fstype:hfs fsflag:D flags:E diag: uti:com.microsoft.excel.xls plugin:/Library/Spotlight/Microsoft Office.mdimporter - find suspect file using: sudo mdutil -t )
    .guylhem.org.home sandboxd[] ([]): Preview() deny mach-lookup com.apple.SystemConfiguration.SCNetworkReachability
    .guylhem.org.home sandboxd[] ([]): Preview() deny system-socket
    .local sandboxd[] ([]): QuickLookSatelli() deny mach-lookup com.apple.PowerManagement.control
    .local sandboxd[] ([]): VTDecoderXPCServ() deny file-read-data /Library/Preferences/.GlobalPreferences.plist
    .local sandboxd[] ([]): fontworker() deny mach-lookup com.apple.ls.boxd

This last one is interesting :

    # bzgrep com.apple.ls.boxd /var/log/system.log*
    /var/log/system.log.2.bz2:Apr 26 18:23:37 macbookair.local sandboxd[64] ([62]): fontworker(62) deny mach-lookup com.apple.ls.boxd
lsboxd sqweaked only once in a month - and for something different.

I'd call this "problem solved", which is supported by my personal observation over this last month : I haven't experienced the problem again yet, while previously it was at least every 2 days (along with the TimeMachine always reindexing)

My suggestion: check your logs with the greps, try this simple fix and report your results in a month.

EDIT: This in on my macbookair with a 480GB OWC SSD (but apparently it also occurs on macbookair with vanilla apple ssds). I used istat menus, and still do. I didn't disable the dynamic pager, spotlight or anything else.

(EDIT2: removed) - thanks for the 4 spaces suggestion! as explained, the simple safe reboot solution made the problem go away, while other approaches didn't. It works for me, and I have 1 month of data supporting that.




> This problem is due to the protection, the sandboxing.

The problem of sandbox violation lines appearing in your Console is caused by sandboxing. It's unlikely that it goes any further than that.

The author has associated some other silent issue with his system to this one sandbox violation just because it happens to be printed all the time.

If you're experiencing some performance problem, run sysdiagnose(1) (or hit the key combo in its man page) and throw it into Apple's bug reporter. Or, if you stare at the output for a very long time, you might even figure out how to read it.


>EDIT2: oops my asterisks in the sed regexp got interpreted as italic. replaced them by unicode chars. Use standard asterisks

Lines prefixed with four spaces go into <code> tags.


What change did you actually make that made the errors stop?


He's talking about the original parent link: http://www.princeton.edu/~jcjb/docs/osx_error_fix/




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: