Live data from Hacker News

OS X El Capitan on the Mac App Store

itunes.apple.com

51–60 of 158 posts

Re: OS X El Capitan on the Mac App Store

#51
post #48

Earlier quoted context omitted.

That’s System Integrity Protection. Under it, system files cannot be deleted or modified, even with sudo. It protects down to the block level, so even if you try to bypass the file system and write to blocks composing system files directly you’ll get an error. This can be disabled but I wouldn’t advise doing so unless you have a really good reason to.

I'm glad game center.app is so well protected.

[deleted]

Re: OS X El Capitan on the Mac App Store

#52
post #47

Earlier quoted context omitted.

That’s System Integrity Protection. Under it, system files cannot be deleted or modified, even with sudo. It protects down to the block level, so even if you try to bypass the file system and write to blocks composing system files directly you’ll get an error. This can be disabled but I wouldn’t advise doing so unless you have a really good reason to.

Modifying /usr isn't THAT unusual.

The FHS defines /usr thus[0]:

> /usr is shareable, read-only data. That means that /usr should be shareable between various FHS-compliant hosts and must not be written to.

Pretty much all modern unices consider that /usr, aside from /usr/local (which the FHS defines as "for use by the system administrator when installing software locally. It needs to be safe from being overwritten when the system software is updated."[1]), is part of the operating system.

It is thus very much unusual to modify /usr[2], and in line with current practices to lock it down tightly.

/usr/local is not under SIP.

[0] http://refspecs.linuxfoundation.org/FHS_3.0/fhs/ch04.html#pu...

[1] http://refspecs.linuxfoundation.org/FHS_3.0/fhs/ch04s09.html

[2] in fact the FHS specifically notes[3]:

> Software placed in /usr may be overwritten by system upgrades. For this reason, local software must not be placed outside of /usr/local without good reason.

"we specify that the system can overwrite or remove anything you put there" is pretty much a dead ringer for "modifying this is unusual"

[3] http://refspecs.linuxfoundation.org/FHS_3.0/fhs/ch04s09.html...

Re: OS X El Capitan on the Mac App Store

#53
post #30

Just upgraded. Can't delete apps. Anyone figured this out yet? Admin accound sudo rm -rf "game center.app" is returning operation not permitted. Appcleaner is not even able to find the packkages much less delete them. I have the GM though. What is this about? Edit: upgrading to the appstore version. Not sure if this was GM specific, or they are locking the Os down even more. Edit2: if you forget your password immeadi…

That’s System Integrity Protection. Under it, system files cannot be deleted or modified, even with sudo. It protects down to the block level, so even if you try to bypass the file system and write to blocks composing system files directly you’ll get an error. This can be disabled but I wouldn’t advise doing so unless you have a really good reason to.

Thanks. I will disable it. Not to be rude, as I appreciate the advice, but what would you consider:

> a really good reason?

I think access to my own filesystem is good enough. I admit when I looked at the reviews, I made sure there were no major issues before upgrade but missed this "sys integrity" thing.

Re: OS X El Capitan on the Mac App Store

#54
post #30

Just upgraded. Can't delete apps. Anyone figured this out yet? Admin accound sudo rm -rf "game center.app" is returning operation not permitted. Appcleaner is not even able to find the packkages much less delete them. I have the GM though. What is this about? Edit: upgrading to the appstore version. Not sure if this was GM specific, or they are locking the Os down even more. Edit2: if you forget your password immeadi…

Thanks for bringing this up, I just cancelled my download. There is no way I'm going to run an OS that attempts to limit my power to delete or modify applications. I think this may be the final straw for me and OSX.

I very recently had to attack GarageBand with a hex editor to disable app sandboxing so I could use third party VST plugins. I realize System Integrity Protection can be disabled by a kernel boot param, but this really, really, sticks in my craw.

Re: OS X El Capitan on the Mac App Store

#55
post #53

Earlier quoted context omitted.

That’s System Integrity Protection. Under it, system files cannot be deleted or modified, even with sudo. It protects down to the block level, so even if you try to bypass the file system and write to blocks composing system files directly you’ll get an error. This can be disabled but I wouldn’t advise doing so unless you have a really good reason to.

Thanks. I will disable it. Not to be rude, as I appreciate the advice, but what would you consider: > a really good reason? I think access to my own filesystem is good enough. I admit when I looked at the reviews, I made sure there were no major issues before upgrade but missed this "sys integrity" thing.

Disabling it would increase the attack area for a malicious app that could somehow gain elevated access.

Since it is possible to disable, why not disable it as-needed rather than always?

Re: OS X El Capitan on the Mac App Store

#56
post #30

Just upgraded. Can't delete apps. Anyone figured this out yet? Admin accound sudo rm -rf "game center.app" is returning operation not permitted. Appcleaner is not even able to find the packkages much less delete them. I have the GM though. What is this about? Edit: upgrading to the appstore version. Not sure if this was GM specific, or they are locking the Os down even more. Edit2: if you forget your password immeadi…

Why do you want to delete Game Center?

Re: OS X El Capitan on the Mac App Store

#57
post #53

Earlier quoted context omitted.

That’s System Integrity Protection. Under it, system files cannot be deleted or modified, even with sudo. It protects down to the block level, so even if you try to bypass the file system and write to blocks composing system files directly you’ll get an error. This can be disabled but I wouldn’t advise doing so unless you have a really good reason to.

Thanks. I will disable it. Not to be rude, as I appreciate the advice, but what would you consider: > a really good reason? I think access to my own filesystem is good enough. I admit when I looked at the reviews, I made sure there were no major issues before upgrade but missed this "sys integrity" thing.

It is your filesystem, but these are system files. Is it really important to you to be able to muck around the OS? If it is, then you go find a way to disable the protections.

Windows also has the System Integrity Protection equivalent.

Re: OS X El Capitan on the Mac App Store

#58
post #48

Earlier quoted context omitted.

That’s System Integrity Protection. Under it, system files cannot be deleted or modified, even with sudo. It protects down to the block level, so even if you try to bypass the file system and write to blocks composing system files directly you’ll get an error. This can be disabled but I wouldn’t advise doing so unless you have a really good reason to.

I'm glad game center.app is so well protected.

It ships on the system. Everything that ships on the system should be protected. Among other things, it prevents system updates from having problems when the apps they're trying to patch are missing.

Re: OS X El Capitan on the Mac App Store

#60
post #54
post #30

Just upgraded. Can't delete apps. Anyone figured this out yet? Admin accound sudo rm -rf "game center.app" is returning operation not permitted. Appcleaner is not even able to find the packkages much less delete them. I have the GM though. What is this about? Edit: upgrading to the appstore version. Not sure if this was GM specific, or they are locking the Os down even more. Edit2: if you forget your password immeadi…

Thanks for bringing this up, I just cancelled my download. There is no way I'm going to run an OS that attempts to limit my power to delete or modify applications. I think this may be the final straw for me and OSX. I very recently had to attack GarageBand with a hex editor to disable app sandboxing so I could use third party VST plugins. I realize System Integrity Protection can be disabled by a kernel boot param, b…

You already couldn't modify most system applications or they would fail code-signing checks. This is merely preventing malware from modifying them.
Post reply on HN