Permissions messed up?

balotin · 05-01-2012, 03:35 PM

I ran Repair Permissions from within Disk Utility and my boot drive (Mac HD) says I have custom access. Everything seems to work normally, but I've had permissions problems in the past and would like to nip this in the bud.

I am running OS 10.5.8 on a Power PC G5 Mac.

Here are the details:

Code:

Last login: Tue May  1 16:27:18 on console
iviews-power-mac-g5:~ iview$ ls -alOe /Volumes
total 8
drwxrwxrwt@   4 root  admin  hidden  136 May  1 16:27 .
drwxrwxr-x+  34 root  admin  -      1224 May  1 16:27 ..
 0: user:iview allow list,add_file,search,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,readsecurity
lrwxr-xr-x    1 root  admin  -         1 May  1 16:27 Mac HD -> /
drwxrwxrwx+ 112 502   502    -      3876 Apr 29 12:49 Work Drive
 0: user:iview allow list,add_file,search,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,readsecurity
iviews-power-mac-g5:~ iview$ id
uid=501(iview) gid=20(staff) groups=20(staff),98(_lpadmin),81(_appserveradm),101(com.apple.sharepoint.group.1),79(_appserverusr),80(admin)
iviews-power-mac-g5:~ iview$ diskutil list
/dev/disk0
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:     Apple_partition_scheme                        *232.9 Gi   disk0
   1:        Apple_partition_map                         31.5 Ki    disk0s1
   2:                  Apple_HFS Mac HD                  232.8 Gi   disk0s3
/dev/disk1
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:     Apple_partition_scheme                        *298.1 Gi   disk1
   1:        Apple_partition_map                         31.5 Ki    disk1s1
   2:                  Apple_HFS Work Drive              298.0 Gi   disk1s3
iviews-power-mac-g5:~ iview$ df
Filesystem    512-blocks      Used Available Capacity  Mounted on
/dev/disk0s3   488134944  92390832 395232112    19%    /
devfs                210       210         0   100%    /dev
fdesc                  2         2         0   100%    /dev
map -hosts             0         0         0   100%    /net
map auto_home          0         0         0   100%    /home
/dev/disk1s3   624880224 591253096  33627128    95%    /Volumes/Work Drive
iviews-power-mac-g5:~ iview$ echo "done"

Thanks for any and all help, and to AgentX, Trevor and Hayne who all were of great help last time!

benwiggy · 05-02-2012, 03:06 AM

Firstly, running Repair Permissions is largely unnecessary, affects only some System components, and ALWAYS gives error messages in its log that some files have custom attributes.

Secondly, I'm a bit worried by the ACLs you have there. Here's mine for comparison:

Code:

drwxrwxrwt@  5 root  admin  hidden  170  2 May 07:17 .
 0: group:everyone deny add_file,add_subdirectory,directory_inherit,only_inherit
drwxr-xr-x  33 root  wheel  -      1190  2 May 07:17 ..
drwxr-xr-x  18 Ben   Ben    -       680 17 Oct  2011 Backup
drwxrwxr-t  40 Ben   Ben    -      1428 11 Mar 12:17 External 1
lrwxr-xr-x   1 root  admin  -         1  2 May 07:16 Macintosh HD -> /

No mention of any user ACLs like you have. I'm also a bit worried that your work drive has its user and group as 502, when your user is 501. Though this may not matter with the ACLs added, and if you have ticked the box to ignore permissions on that drive. Did you have another user account?

You say you had permissions problems in the past: might these ACLs have been applied everywhere as a fix?

However,

Quote:

Originally Posted by balotin


	Everything seems to work normally

Then your work is done. Go home, and sleep well.

agentx · 05-02-2012, 03:55 AM

I presume problems are on your Work Drive. I can see a little bit of inconsitency.
ie. owner / group is ID 502 yet you are logged in as ID 501 (iview) and you have an ACL fro iview on drive as well....with completely open permissions.

Ideally i would like to see the next level of permissions on drive before suggesting my "fix" or clean up !

Code:

cd /Volumes/"Work Drive"
ls -alOe

Please post back info then will give you a few commands to fix.

agentx · 05-02-2012, 03:58 AM

Do you use Work Drive as a Time machine target ?
Are you generally logged in as iview most of the time ?
Do you login as as admin very often ?
Why not just run you primary account as an admin ? ( Power users should IMHO!)

balotin · 05-02-2012, 09:45 AM

Benwiggy and Agentx, thanks for getting back to me.

Benwiggy, the only ACL's that I've applied were some time ago when Work Drive was locked. You can see that thread here.

Agentx, here are the results of the code you gave me.

Code:

Last login: Wed May  2 10:13:19 on console
iviews-power-mac-g5:~ iview$ cd /Volumes/"Work Drive"
iviews-power-mac-g5:Work Drive iview$ ls -alOe
total 1009232
drwxrwxr-x    6 iview  staff  -            204 Oct 20  2011  Bryns Album
drwxrwxr-x   29 iview  staff  -            986 Feb  7 23:06  blog stuff
drwxrwxrwx+ 112 502    502    -           3876 Apr 29 12:49 .
 0: user:iview allow list,add_file,search,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,readsecurity
drwxrwxrwt@   4 root   admin  hidden       136 May  2 10:31 ..
-rwxrwxr-x@   1 iview  staff  hidden      1698 Nov 27  2007 .BridgeSort
-rwxrwxr-x@   1 iview  501    hidden     43012 May  1 14:48 .DS_Store
drwxrwxr-x@   3 iview  501    hidden       102 Feb  4  2011 .Spotlight-V100
drwxrwxr-x@   4 iview  501    hidden       136 Nov 22  2006 .TemporaryItems
drwxrwxr-x@   3 iview  501    hidden       102 May  2 10:13 .Trashes
-rwxrwxr-x    1 root   501    -              0 Nov 19  2009 .com.apple.timemachine.supported
drwxrwxr-x   31 root   501    -           1054 May  2 10:13 .fseventsd
-rwxrwxr-x    1 iview  501    -      138653670 Jan 17  2009 2009.pdf
-rwxrwxr-x@   1 iview  staff  -       15857664 Mar  1  2009 5x7card kid.qxd
drwxrwxr-x   43 iview  501    -           1462 Sep  4  2011 AO ad stuff
drwxr-xr-x    8 iview  502    -            272 Mar 29 20:08 Adelman DVD
drwxr-xr-x    6 iview  502    -            204 Apr  9 18:22 Ariel Album
drwxrwxr-x   11 iview  501    -            374 Oct 17  2010 Berman wraps
drwxr-xr-x   15 iview  staff  -            510 Feb  6 11:56 Blasberg board
drwxr-xr-x  165 iview  502    -           5610 Apr 29 13:06 Carly Tiff files
drwxr-xr-x   20 iview  502    -            680 Jan 23 15:16 Cassidy album
drwxrwxr-x@  15 iview  501    -            510 Jan 30 16:19 Client Jobs
drwxrwxr-x    4 iview  staff  -            136 Aug 10  2011 Desktop
-rwxrwxr-x@   1 iview  501    hidden   2300416 Apr 26 18:44 Desktop DB
-rwxrwxr-x@   1 iview  501    hidden       962 Apr 16  2009 Desktop DF
drwx------@  36 iview  staff  -           1224 May  2 10:14 Dropbox
drwxr-xr-x  204 iview  502    -           6936 Mar 14 11:23 Dunwoody CC jan 2012
drwxrwxr-x   35 iview  staff  -           1190 Mar  9 09:55 Ellerine Bar
drwxrwxr-x    4 iview  staff  -            136 Sep 28  2011 Ellerine album catalog
drwxr-xr-x    4 iview  502    -            136 Apr  3 20:01 Emma Toor DVD
drwxrwxr-x  990 iview  staff  -          33660 Apr 28  2011 Eric April 23
drwxrwxr-x    6 iview  staff  -            204 Sep  2  2011 Ewers Album
drwx------@ 126 iview  502    -           4284 Mar 15 11:18 Grandpa 2
drwxr-xr-x   19 iview  502    -            646 Apr  9 16:43 Gunthert Boards
drwxr-xr-x  125 iview  staff  -           4250 Apr 17 12:34 Jon Schmit-Davis
drwxrwxr-x   14 iview  staff  -            476 Jan 13  2009 Joseph's final version for Natalie
drwxrwxr-x   11 iview  staff  -            374 Aug  6  2009 Kid small print samples 09
drwxrwxr-x   16 iview  staff  -            544 Apr 11 11:17 Lies Album
drwxr-xr-x   27 iview  staff  -            918 Feb  2 11:44 Max Adelman Book
drwxr-xr-x    4 iview  staff  -            136 Feb  6 10:11 Max board
drwxr-xr-x    3 iview  502    -            102 Apr 10 14:50 Melissa Oxman
drwxrwxr-x    3 iview  staff  -            102 Oct  6  2009 NeatImage.4.7.Home.pkg
-rwxrwxr-x@   1 iview  staff  -        3977466 Apr 21  1999 PDI Target.jpg
-rwxrwxr-x@   1 iview  staff  -          59965 Jul  6  2011 Page 1.eps
-rw-r--r--@   1 iview  502    -      115203170 Oct 31  2011 Page 1d.eps
-rw-r--r--@   1 iview  502    -       98726858 Apr  9 16:27 Page 3a.eps
drwxr-xr-x@  80 iview  502    -           2720 Jan 25 12:30 Rachael's photos
drwxrwxr-x   42 iview  staff  -           1428 Mar 21 19:19 Ross Miller Album
-rwxrwxr-x@   1 iview  staff  -         294924 Jul 19  2011 Sample boards.pdf
drwxrwxr-x@   2 iview  staff  hidden        68 Oct 11  2007 Temporary Items
drwxr-xr-x    5 iview  502    -            170 Mar 26 13:47 Tripp Album
-rwxrwxr-x@   1 iview  staff  -       26972782 Jul 13  2011 ad.eps
drwxrwxr-x@  91 iview  staff  -           3094 Oct 11  2007 ads
drwxrwxr-x    4 iview  staff  -            136 Aug 16  2011 album glenn
-rwxrwxr-x@   1 iview  staff  -          56320 Feb  7  2011 album layout
-rwxrwxr-x@   1 iview  staff  -       20969472 Jul 13  2011 ao ad layout 2011 and 2012
-rwxrwxr-x@   1 iview  staff  -       20969472 Jul 12  2011 ao ad layout 2011 and 2012 #4
-rwxrwxr-x    1 iview  staff  -       37673533 Oct 31  2010 ao ad layout 2011_Layout 1.pdf
drwxr-xr-x  135 iview  502    -           4590 Oct 25  2011 ao lunch oct
drwxr-xr-x   18 iview  502    -            612 Dec 16 08:22 ariel board
drwxr-xr-x    3 iview  502    -            102 Apr  1 15:54 art
drwxrwxr-x   12 iview  staff  -            408 Sep 13  2011 aviv steve book
drwxrwxr-x   25 iview  502    -            850 Sep 13  2011 background hi res
drwxrwxr-x   17 iview  staff  -            578 May  4  2010 bat promo eps files
drwxrwxr-x  260 iview  staff  -           8840 May 21  2011 beth post
drwxrwxr-x   98 iview  staff  -           3332 Aug 18  2009 bloomindales promo images folder
-rwxrwxr-x@   1 iview  staff  -       10503168 Jul 19  2011 board pdf
-rwxrwxr-x@   1 iview  staff  -       10501120 Jul 19  2011 board pdf #1
drwxrwxr-x  773 iview  staff  -          26282 May 17  2010 bright horizons kid proofs 
drwxrwxr-x  136 iview  staff  -           4624 Aug 17  2011 bryn album
drwxrwxr-x    5 iview  staff  -            170 Aug  6  2009 byrony sister's images
drwxrwxr-x    8 iview  501    -            272 Nov 30  2007 c41 stuff
drwxr-xr-x    6 iview  502    -            204 Apr 29 15:26 carly layouts
drwxr-xr-x   15 iview  502    -            510 Apr 17 14:05 cody album
drwxr-xr-x   17 iview  staff  -            578 Jan 18 10:33 cohen board
drwxr-xr-x   39 iview  staff  -           1326 Feb 23 14:56 connor board
drwxr-xr-x    8 iview  502    -            272 Dec 13 15:45 crouch album
drwxr-xr-x    5 iview  502    -            170 Apr 26 15:51 edward parent album
drwxrwxr-x   45 iview  staff  -           1530 Apr  1  2011 ellerine signing book
drwxrwxr-x    7 iview  staff  -            238 May 19  2011 emory grad 2011
drwxr-xr-x   49 iview  502    -           1666 Apr  3 12:15 emory portrait 1
drwxrwxr-x   51 iview  staff  -           1734 Apr 12  2011 for new mitzvah card and blog
drwxrwxr-x  720 iview  staff  -          24480 Feb  4  2011 for new wedding card and blog
drwxrwxr-x  297 iview  staff  -          10098 Feb 24  2008 from cd's
drwxrwxr-x@   8 iview  staff  -            272 Sep  2  2008 from zips
drwxrwxr-x  411 iview  staff  -          13974 Jan 17  2009 getting ready final
drwxrwxr-x    6 iview  staff  -            204 Aug 26  2011 glenn album
drwxrwxr-x    5 iview  staff  -            170 Aug 11  2011 jacobsen albums
drwxrwxr-x    6 iview  staff  -            204 Apr 11 14:51 jacobson
drwxr-xr-x    5 iview  502    -            170 Jan 19 15:25 jake
-rwxrwxr-x@   1 iview  staff  -        9849272 Oct  5  2001 lakebaloton.tif
drwxrwxr-x   15 iview  staff  -            510 Nov 13  2007 law promo images
-rwxrwxr-x@   1 iview  staff  -          60230 Feb 18  2011 logo.eps
drwxr-xr-x    5 iview  502    -            170 Oct 10  2011 maddie board
drwxrwxr-x   22 iview  staff  -            748 May 11  2011 max b signing board
drwxrwxr-x  232 iview  staff  -           7888 Jun 30  2011 mccall ad files
drwxrwxr-x  101 iview  staff  -           3434 Oct 10  2011 new kids portfolio
-rwxrwxr-x@   1 iview  staff  -            353 Mar  2  2010 numbers.rtf
drwxrwxr-x   14 iview  501    -            476 Dec 18  2008 pdi targets
drwxrwxr-x   32 iview  501    -           1088 Oct  5  2009 print box
drwxrwxr-x    5 iview  staff  -            170 Feb 21  2011 prophoto blog software
drwxrwxr-x@  20 iview  staff  -            680 Jul 13  2011 qex
drwxrwxr-x    8 iview  staff  -            272 Nov  1  2011 quark album templates
drwxr-xr-x    8 iview  502    -            272 Mar 26 14:57 regina album photos
drwxrwxr-x  237 iview  staff  -           8058 May 12  2011 sarah album source low res
drwxrwxr-x@  56 iview  501    -           1904 Sep  6  2009 scanned
drwxrwxr-x   12 iview  staff  -            408 Jul  4  2011 scans
drwxrwxr-x   19 iview  staff  -            646 Mar 26  2009 shadow images
drwxr-xr-x  431 iview  502    -          14654 Oct 11  2011 shella album
drwxrwxr-x    4 iview  staff  -            136 Aug  8  2011 tripp albums
drwxrwxr-x  175 iview  staff  -           5950 Mar  8 14:10 zussman sample
iviews-power-mac-g5:Work Drive iview$

I am not having any problems accessing files at the moment, I just thought it was strange that after running Repair Permissions on my boot drive (Mac HD) that my access had changed from "you can read and write" to "you have custom access" on that volume Mac HD. And I'm a bit worried that the ACL's that I do have will lead to problems in the future.

I do not use Work Drive as a Time Machine target, I am always logged in as "iview", and I was under the impression that "iview" was the administrative account. At least that is what is says in the User's control panel.

Also, Work Drive is an internal drive- don't know if this matters or not, or if I should have the "ignore ownership" box checked off. Currently it is not.

Thanks again for your time.
Balotin

agentx · 05-02-2012, 10:13 AM

I would correct the permissions on your work drive with commands below.
I am suggesting to correct all permissions on files/folders on drive so hence use of -R (Recursive)
iview is indeed admin so no issue there and as this is the primary user (501) and an internal drive i suggest changing the ownership to iview for everything. I have a similar drive to you which i own everything and it is not shared on network.

1st command strips all ACLs ( do not really need the ACL unless you are file sharing the disk to other users on network)
2nd command sets group to admin for all files/folders
3rd command sets RWX for iview and admin group and R X for everyone else.
4th Command sets the correct perms for Dropbox folder/files which is more just for correctness

Code:

sudo chmod -RN /Volumes/"Work Drive"
sudo chgrp -R admin /Volumes/"Work Drive"
sudo chmod -R 775 /Volumes/"Work Drive"
sudo chown -R iview:staff /Volumes/"Work Drive"/Dropbox ; chmod -R 700 /Volumes/"Work Drive"/Dropbox

There are other ways to set it up....but this should do the job ;-)

balotin · 05-05-2012, 04:22 PM

Thanks, Agentx, will do!

Is there a way to set my boot drive (Mac HD) to the correct permissions so that I truly "own" that drive and don't just have "custom access"? Or does it really not matter?

Thanks again!

agentx · 05-05-2012, 04:59 PM

Boot drive is ok and working and best not to mess with it!
So do not worry....

balotin · 08-06-2012, 03:43 PM

Thank you Agentx for all of your help with this.

Sincerely,
Joseph

05-02-2012, 03:55 AM	#3
agentx Hall of Famer Join Date: Feb 2003 Location: Brighton, UK Posts: 3,807	I presume problems are on your Work Drive. I can see a little bit of inconsitency. ie. owner / group is ID 502 yet you are logged in as ID 501 (iview) and you have an ACL fro iview on drive as well....with completely open permissions. Ideally i would like to see the next level of permissions on drive before suggesting my "fix" or clean up ! Code: cd /Volumes/"Work Drive" ls -alOe Please post back info then will give you a few commands to fix. Last edited by agentx; 05-02-2012 at 03:58 AM.

05-05-2012, 04:22 PM	#7
balotin Prospect Join Date: Jul 2011 Posts: 36	Thank you Thanks, Agentx, will do! Is there a way to set my boot drive (Mac HD) to the correct permissions so that I truly "own" that drive and don't just have "custom access"? Or does it really not matter? Thanks again!

08-06-2012, 03:43 PM	#9
balotin Prospect Join Date: Jul 2011 Posts: 36	Thank you. Thank you Agentx for all of your help with this. Sincerely, Joseph

Thread Tools
Show Printable Version Email this Page
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread:

05-02-2012, 03:58 AM	#4
agentx Hall of Famer Join Date: Feb 2003 Location: Brighton, UK Posts: 3,807	Do you use Work Drive as a Time machine target ? Are you generally logged in as iview most of the time ? Do you login as as admin very often ? Why not just run you primary account as an admin ? ( Power users should IMHO!)

05-02-2012, 10:13 AM	#6
agentx Hall of Famer Join Date: Feb 2003 Location: Brighton, UK Posts: 3,807	I would correct the permissions on your work drive with commands below. I am suggesting to correct all permissions on files/folders on drive so hence use of -R (Recursive) iview is indeed admin so no issue there and as this is the primary user (501) and an internal drive i suggest changing the ownership to iview for everything. I have a similar drive to you which i own everything and it is not shared on network. 1st command strips all ACLs ( do not really need the ACL unless you are file sharing the disk to other users on network) 2nd command sets group to admin for all files/folders 3rd command sets RWX for iview and admin group and R X for everyone else. 4th Command sets the correct perms for Dropbox folder/files which is more just for correctness Code: sudo chmod -RN /Volumes/"Work Drive" sudo chgrp -R admin /Volumes/"Work Drive" sudo chmod -R 775 /Volumes/"Work Drive" sudo chown -R iview:staff /Volumes/"Work Drive"/Dropbox ; chmod -R 700 /Volumes/"Work Drive"/Dropbox There are other ways to set it up....but this should do the job ;-)

05-05-2012, 04:59 PM	#8
agentx Hall of Famer Join Date: Feb 2003 Location: Brighton, UK Posts: 3,807	Boot drive is ok and working and best not to mess with it! So do not worry....