Permissions/ACL reporting

Hi,
Does anyone know of any software that will produce a report of a file system tree along with the permissions attached to each directory within the tree?
Cheers,
Stu

OK
So I misread on the your instructions about the PW reset, did it, no harm in that. I did also select the options to reset all the permissions for all the accounts and the ACL issues were not resolved. My bad, I forgot to note that.
You do suggest getting and expert opinion but alas these are rather elusive. In most cases the Apple solutions is to do a complete reinstall... I have found that unless you completely wipe a drive and rebuild everything there are often artifacts left behind. Since I have full and redundant back-ups I would rather explore and hack a little instead of a dull old system reinstall. The irony is the system issue I had was it was the result a reinstall and combo update on a new drive. I recognize the risks of entering the realms of the System folders but I am willing to explore knowing full well that I have a path to recovery.
Thanks again for your insights. I come to the forums looking for insights and ideas but not a lecture...

Similar Messages

User Level permissions (ACLs) - HOW?

Dear Expert,
One more victim of Mackeeper writing to you seeking help...
I tried my best to remove it from the comp and I have succeded.
However, I am stuck at 2 points:
1) How User Level permissions (ACLs)? Please guide....
2) Mackeeper keeps opening pages in safari on its own, whenever I open a new tab. Please GUIDE.
Please help.....
Look forward to receiving valuable inputs.
Regards,
Sony Thadani

There is no need to download anything to solve this problem.
You may have installed the "Downlite" or "VSearch" ad-injection malware. Follow the instructions on this Apple Support page to remove it. It's been reported that some variants of the malware block access to the page. If that happens, start in safe mode by holding down the shift key at the startup chime, then try again.
Back up all data before making any changes.
One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.
If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, then you may have an adware variant not covered by the support article. Ask for instructions in that case.
The problem may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This malware is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates
if it's not already checked.

WCCP Deny and permit ACL on 3750

Hi everyone,
I have configured 3750 switch as WCCP.
I am redirecting only inside traffic.
Switch has direct connection to Mcafee Gateway.
Our internal LAN subnets are 172.16.x.x and 192.168.0.0.
Need to confirm if i want internal users to access the internet then under permit ACL i can say
permit 172.16.0.0 to any?
If i want some users traffic should not be redirected to Mcafee gateway then i can say
deny 172.16.10.10 any?
Regards
MAhesh

Hi Reuben,
Yes IOS version is higher than 12.2(58)SE.
Thanks for reply.
Regards
MAhesh

Repair Disk Permissions - ACL Errors

I opened Disk Utility and repaired disk permissions last night and was surprised to find six errors. I ran it again, and the first three errors disappeared. But the other three remain even after I repaired disk permissions two more times.
These are the errors:
ACL found but not expected on "Applications/Utilities".
ACL found but not expected on "Applications".
ACL found but not expected on "Library".
Does anyone know what they mean, and how I can fix them?
Thanks.

Hi, they were common before the update to 10.5.2, and than they went away for the most part. There is much information on them with a search. Google the ACL errors and you will see what I mean. I hesitate to offer a solution because there's so many conflicting statements.
Ray

Disk Permissions: ACL Found

I ran "Repair Disk Permissions" with the following result:
ACL found but not expected on "private/var/root".
Repaired "private/var/root".
ACL found but not expected on "private/var/root/Library".
Repaired "private/var/root/Library".
ACL found but not expected on "private/var/root/Library/Preferences".
Repaired "private/var/root/Library/Preferences".
I then ran Verify Disk Permissions with the following results:
ACL found but not expected on "private/var/root".
ACL found but not expected on "private/var/root/Library".
ACL found but not expected on "private/var/root/Library/Preferences".
Why are these ACL's show up after they have been repaired?

Hello M:
I think "ACL" refers to access control list which seems to be something used in wireless configurations (I have no wireless things in my network).
Why are these ACL's show up after they have been repaired?
I assume that this is the reason:
found but not expected
Unless you are having problems, I would completely ignore the messages. As an aside, running permission repair is, IMHO, a waste of time (although I admit I do it myself after software updates)
Barry

UME: Regular Permissions - ACL Permissions

Gentelmen,
After reading recently published SDN article about WD security (Aug 31, 2004 -- https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sapportals.km.docs/documents/a1-8-4/web dynpro security.pdf), one question araise for me: what is a connection (if any) between regular UME permissions (in fact, std. java permissions) and UME ACL permission?
Any thoughts?
VS

[ -closed with no resolution- ]

When I do a repair permissions "ACL found..." keeps showing up. Why?

2008-03-16 22:22:15 -0400: Repairing permissions for “Macintosh HD”
2008-03-16 22:26:00 -0400: ACL found but not expected on "Applications/Utilities".
2008-03-16 22:26:00 -0400: ACL found but not expected on "Applications".
2008-03-16 22:26:00 -0400: ACL found but not expected on "Library".
2008-03-16 22:26:09 -0400:
2008-03-16 22:26:09 -0400: Permissions repair complete
2008-03-16 22:26:09 -0400:
2008-03-16 22:26:09 -0400:

This question has been asked and answered many times already, and what you see is of no concern. Please search the discussions before posting, as it can save you time in the future.
http://docs.info.apple.com/article.html?artnum=306925

Repair Permissions: ACL . . . on "Library"

I restarted my computer and repaired disk permissions. It displayed two errors:
Permissions differ on "private/var/log/secure.log", should be -re------, they are -rw-r------ ,
ACL found but not expected on "Library".
I repaired disk permissions a second time, fixing the first error. But the second error displays even after I repaired disk permissions a third time.
Can anyone tell me what this error means and how I can fix it?
Thanks.

Correct, but it will reappear the next time the secure.log file is rotated, which is done by the scheduled maintenance tasks. The effect of that repair is to make the secure.log file only readable by root, which doesn't make much difference on a home system.
(31470)
Still, what is the "e" permission that it says it should be? That just seems wrong.
Message was edited by: joshz

Permissions to reports

i build few reports in discoverer.
how i need to give permissions to users using discoverer admin?
my versions are
OracleBI Discoverer 10g (10.1.2.1)
Oracle Business Intelligence Discoverer Plus 10g (10.1.2.48.18)

Hi,
Permissions to the Reports involves setting up the "Security" and "Privileges" in the Admin and "Sharing" in the Desktop/Plus.
In Admin, go to Tools-->Privileges-->Select the user and give them access to that Business Area.
In Admin, go to Tools-->Security-->Give them appropropriate "Adminisitration" or the "Desktop" privileges.
In Desktop, Open the report, Go to File-->Manage Workbooks-->Sharing-->
Select the requried users.
Hope this helps.
Thanks.

Permissions ACL Freakout - Activity Monitor Can't Run - Time Machine?

Occasionally, when I repair disc permissions on 1.5.5, I find that virtually every file on my computer says "ACL found but not expected". The repair takes up two two hours to run.
The repair works, but the condition appears to come back every time I run Time Machine. All of this would be a superficial irritation except that I often can't run Activity Monitor, and have to go through the two-hour permissions repair in order to get that it working again.
Ideally, I'd like to prevent the permissions condition from happening and keep Activity Monitor operable. Any ideas?
A few tidbits:
Activity Monitor is in Applications\Utilities
I run Time Machine from an account other than the Admin one
The permissions repair can be done from any account successfully

SuperDuper is fine. Even Disk Utility Restore will do the job.
But I'm beginning to be "cautiously paranoid" with breaking in / testing / torturing / any new drive now (again) for a day or two before putting it into full service. If that sounds hard, just zero the drive and fill it up with junk data that gets reformated later anyway.
Can't go far wrong with WD 640GB $76 from OWC right now. Maybe a couple. Two backup sets for every drive.

Repair Disk Permissions - ACL found but...

Suddenly Repair Disk Permissions gives an exceptionally long list of "ACL found but not expected on xxxxxxxx" and apparently is unable to carry out repairs as each run of the "repair" brings up the same long list. Additionally, the reason I ignited the disk permissions repairs was that my PowerBook Pro suddenly appeared extremely slow - taking up to 3 hours to update a single application. I'd appreciate any feedback on correcting this ongoing issue.
Thanks - Earl
Example:
ACL found but not expected on “private”Repaired “private”ACL found but not expected on “private/tmp”Repaired “private/tmp”ACL found but not expected on “Applications/App Store.app/Contents”Repaired “Applications/App Store.app/Contents”ACL found but not expected on “Applications/App Store.app/Contents/Info.plist”Repaired “Applications/App Store.app/Contents/Info.plist”ACL found but not expected on “Applications/App Store.app/Contents/MacOS”Repaired “Applications/App Store.app/Contents/MacOS”ACL found but not expected on “Applications/App Store.app/Contents/MacOS/App Store”Repaired “Applications/App Store.app/Contents/MacOS/App Store”ACL found but not expected on “Applications/App Store.app/Contents/PlugIns”
MacBook Pro 15-inches 2.4/2.2 GHz
Processor: 2.2 GHz Intel Core 2 Duo
Running OS X Yosemite

Thanks so much for your advise, Linc, and sorry for the delay in getting back - things have ben pretty hectic since. I've now done as you suggested but rather than trying to find the log for the date the issue started (scrolling through what seems like miles and miles of lines of data) I've copied and am posting here a more recent section of the log taken while attempting to install an update to OS X 10.10.2 for the past 20 hours. Any help would be highly appreciated.
3/19/15 7:34:13.811 PM com.apple.xpc.launchd[1]: (com.apple.Kerberos.digest-service[6823]) Service exited with abnormal code: 1
3/19/15 7:34:13.807 PM digest-service[6823]: krb5_kdc_set_dbinfo: Failed to find KerberosKDC node
3/19/15 7:34:13.811 PM com.apple.xpc.launchd[1]: (com.apple.Kerberos.digest-service) Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
3/19/15 7:34:17.561 PM AlertAll[64949]: >> timerMethod
3/19/15 7:34:17.563 PM AlertAll[64949]: >> updateTable
3/19/15 7:34:17.631 PM AlertAll[64949]: Error returned from iconservicesagent: Error Domain=NSCocoaErrorDomain Code=4097 "Couldn’t communicate with a helper application." (connection to service named com.apple.iconservices) UserInfo=0x78730cd0 {NSDebugDescription=connection to service named com.apple.iconservices}
3/19/15 7:34:20.780 PM kdc[6829]: krb5_kdc_set_dbinfo: Failed to find KerberosKDC node
3/19/15 7:34:20.782 PM com.apple.xpc.launchd[1]: (com.apple.Kerberos.kdc[6829]) Service exited with abnormal code: 1
3/19/15 7:34:20.782 PM com.apple.xpc.launchd[1]: (com.apple.Kerberos.kdc) Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
3/19/15 7:34:22.561 PM AlertAll[64949]: >> timerMethod
3/19/15 7:34:22.563 PM AlertAll[64949]: >> updateTable
3/19/15 7:34:22.629 PM AlertAll[64949]: Error returned from iconservicesagent: Error Domain=NSCocoaErrorDomain Code=4097 "Couldn’t communicate with a helper application." (connection to service named com.apple.iconservices) UserInfo=0x78731630 {NSDebugDescription=connection to service named com.apple.iconservices}
3/19/15 7:34:23.853 PM digest-service[6835]: krb5_kdc_set_dbinfo: Failed to find KerberosKDC node
3/19/15 7:34:23.854 PM com.apple.xpc.launchd[1]: (com.apple.Kerberos.digest-service[6835]) Service exited with abnormal code: 1
3/19/15 7:34:23.854 PM com.apple.xpc.launchd[1]: (com.apple.Kerberos.digest-service) Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
3/19/15 7:34:27.139 PM WindowServer[132]: CGXDisplayDidWakeNotification [204916449340023]: posting kCGSDisplayDidWake
3/19/15 7:34:27.141 PM WindowServer[132]: handle_will_sleep_auth_and_shield_windows: Deferring.
3/19/15 7:34:27.521 PM identityservicesd[325]: <IMMacNotificationCenterManager: 0x7fb8eb59c9c0>: notification observer: com.apple.iChat   notification: __CFNotification 0x7fb8eb56ae20 {name = _NSDoNotDisturbDisabledNotification}
3/19/15 7:34:27.563 PM AlertAll[64949]: >> timerMethod
3/19/15 7:34:27.565 PM AlertAll[64949]: >> updateTable
3/19/15 7:34:27.840 PM identityservicesd[325]: <IMMacNotificationCenterManager: 0x7fb8eb59c9c0>:    NC Disabled: NO
3/19/15 7:34:27.848 PM identityservicesd[325]: <IMMacNotificationCenterManager: 0x7fb8eb59c9c0>:   DND Enabled: NO
3/19/15 7:34:27.849 PM identityservicesd[325]: <IMMacNotificationCenterManager: 0x7fb8eb59c9c0>: Updating enabled: YES   (Topics: (
    "com.apple.private.alloy.icloudpairing",
    "com.apple.private.alloy.continuity.encryption",
    "com.apple.private.alloy.continuity.activity",
    "com.apple.private.ids",
    "com.apple.private.alloy.phonecontinuity",
    "com.apple.private.alloy.continuity.activity.public",
    "com.apple.private.alloy.continuity.auth",
    "com.apple.private.alloy.idsremoteurlconnection",
    "com.apple.private.alloy.screensharing",
    "com.apple.private.alloy.maps",
    "com.apple.private.alloy.callhistorysync",
    "com.apple.private.alloy.continuity.tethering"
3/19/15 7:34:27.849 PM identityservicesd[325]: <IMMacNotificationCenterManager: 0x7fb8eb479af0>: notification observer: com.apple.iChat   notification: __CFNotification 0x7fb8eb56ae20 {name = _NSDoNotDisturbDisabledNotification}
3/19/15 7:34:27.861 PM identityservicesd[325]: <IMMacNotificationCenterManager: 0x7fb8eb479af0>:    NC Disabled: NO
3/19/15 7:34:27.873 PM identityservicesd[325]: <IMMacNotificationCenterManager: 0x7fb8eb479af0>:   DND Enabled: NO
3/19/15 7:34:27.873 PM identityservicesd[325]: <IMMacNotificationCenterManager: 0x7fb8eb479af0>: Updating enabled: YES   (Topics: (
    "com.apple.madrid"
3/19/15 7:34:28.012 PM AlertAll[64949]: Error returned from iconservicesagent: Error Domain=NSCocoaErrorDomain Code=4097 "Couldn’t communicate with a helper application." (connection to service named com.apple.iconservices) UserInfo=0x78685530 {NSDebugDescription=connection to service named com.apple.iconservices}
3/19/15 7:34:30.876 PM kdc[6841]: krb5_kdc_set_dbinfo: Failed to find KerberosKDC node
3/19/15 7:34:30.877 PM com.apple.xpc.launchd[1]: (com.apple.Kerberos.kdc[6841]) Service exited with abnormal code: 1
3/19/15 7:34:30.877 PM com.apple.xpc.launchd[1]: (com.apple.Kerberos.kdc) Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
3/19/15 7:34:32.561 PM AlertAll[64949]: >> timerMethod
3/19/15 7:34:32.563 PM AlertAll[64949]: >> updateTable
3/19/15 7:34:32.765 PM AlertAll[64949]: Error returned from iconservicesagent: Error Domain=NSCocoaErrorDomain Code=4097 "Couldn’t communicate with a helper application." (connection to service named com.apple.iconservices) UserInfo=0x7878bca0 {NSDebugDescription=connection to service named com.apple.iconservices}
3/19/15 7:34:33.904 PM digest-service[6847]: krb5_kdc_set_dbinfo: Failed to find KerberosKDC node

Disk utility - repair permissions keeps reporting same issues

my machine has been unstable for a while, and i thought it was time to repair permissions.
normally, after being run a couple of times, there are no more to be repaired. however, this time, the same 35 lines of permissions being changed are displayed over and over. also after rebooting.
1. why aren't the permissions finally corrected?
most issues concern 'System/Library/CoreServices/Front Row.app/Contents', 'System/Library/PrivateFrameworks/iPhotoAccess.framework/Versions/A/Resources/P lugins' and a couple of warnings that suid-files are changed and won't be repaired.
2. i never used front row, - what's happening?
3. what's with the suid-files?
4. will reinstalling leopard help my situation?
5. if i use time machine to restore, how can i be sure the problems don't persist? or 'get back in'?

why aren't the permissions finally corrected?
Apple changed the structure of some of its packages without updating the repair permissions mechanism. Until and unless they release a patch, nothing done will stop those messages from appearing. Disregard them.
i never used front row, - what's happening?
You installed a package which updated it.
what's with the suid-files?
Those messages are normal.
(43205)

Disk Utility Reports Permissions Repaired, but Don't Verify

I run permissions repair (as I've been having kernel panics), and there is a bunch of stuff that gets reported as fixed. However, as soon as the repair is complete, if I run Verify Disk Permissions, it reports back the same errors.
See the log below:
*Repairing permissions for “Hybrid”*
Permissions differ on "Library/Internet Plug-Ins/Flash Player.plugin/Contents/MacOS/Flash Player", should be -rw-rw-r-- , they are -rwxrwxr-x .
Repaired "Library/Internet Plug-Ins/Flash Player.plugin/Contents/MacOS/Flash Player".
User differs on "private/var/at", should be 0, user is 1.
Repaired "private/var/at".
Permissions differ on "usr/lib/libpcap.A.dylib", should be -rwxr-xr-x , they are -r-xr-xr-x .
Repaired "usr/lib/libpcap.A.dylib".
Permissions differ on "usr/share/sandbox/mDNSResponder.sb", should be -rw-r--r-- , they are -r--r--r-- .
Repaired "usr/share/sandbox/mDNSResponder.sb".
Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Classes/dt.jar", should be lrwxr-xr-x , they are lrw-r--r-- .
Repaired "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Classes/dt.jar".
Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Classes/jce.jar", should be lrwxr-xr-x , they are lrw-r--r-- .
Repaired "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Classes/jce.jar".
Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Classes/jconsole.ja r", should be lrwxr-xr-x , they are lrw-r--r-- .
Repaired "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Classes/jconsole.ja r".
Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Classes/management- agent.jar", should be lrwxr-xr-x , they are lrw-r--r-- .
Repaired "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Classes/management- agent.jar".
User differs on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib", should be 0, user is 95.
Repaired "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib".
Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib/dt.jar", should be -rw-r--r-- , they are -rwxr-xr-x .
Repaired "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib/dt.jar".
Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib/jce.jar", should be -rw-r--r-- , they are -rwxr-xr-x .
Repaired "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib/jce.jar".
Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib/management -agent.jar", should be -rw-r--r-- , they are -rwxr-xr-x .
Repaired "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib/management -agent.jar".
Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib/security/b lacklist", should be lrwxr-xr-x , they are lrw-r--r-- .
Repaired "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib/security/b lacklist".
User differs on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Libraries", should be 0, user is 95.
Repaired "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Libraries".
Permissions differ on "System/Library/Java/Support/Deploy.bundle/Contents/Resources/JavaPluginCocoa.b undle/Contents/Resources/Java/deploy.jar", should be lrwxr-xr-x , they are lrw-r--r-- .
Repaired "System/Library/Java/Support/Deploy.bundle/Contents/Resources/JavaPluginCocoa.b undle/Contents/Resources/Java/deploy.jar".
Permissions differ on "System/Library/Java/Support/VisualVM.bundle/Contents/Home/profiler3/lib/deploy ed/jdk15/hpux-pa_risc2.0/libprofilerinterface.sl", should be -rw-r--r-- , they are -rwxr-xr-x .
Repaired "System/Library/Java/Support/VisualVM.bundle/Contents/Home/profiler3/lib/deploy ed/jdk15/hpux-pa_risc2.0/libprofilerinterface.sl".
Permissions differ on "System/Library/Java/Support/VisualVM.bundle/Contents/Home/profiler3/lib/deploy ed/jdk15/hpux-pa_risc2.0w/libprofilerinterface.sl", should be -rw-r--r-- , they are -rwxr-xr-x .
Repaired "System/Library/Java/Support/VisualVM.bundle/Contents/Home/profiler3/lib/deploy ed/jdk15/hpux-pa_risc2.0w/libprofilerinterface.sl".
Permissions differ on "System/Library/Java/Support/VisualVM.bundle/Contents/Home/profiler3/lib/deploy ed/jdk16/hpux-pa_risc2.0/libprofilerinterface.sl", should be -rw-r--r-- , they are -rwxr-xr-x .
Repaired "System/Library/Java/Support/VisualVM.bundle/Contents/Home/profiler3/lib/deploy ed/jdk16/hpux-pa_risc2.0/libprofilerinterface.sl".
Permissions differ on "System/Library/Java/Support/VisualVM.bundle/Contents/Home/profiler3/lib/deploy ed/jdk16/hpux-pa_risc2.0w/libprofilerinterface.sl", should be -rw-r--r-- , they are -rwxr-xr-x .
Repaired "System/Library/Java/Support/VisualVM.bundle/Contents/Home/profiler3/lib/deploy ed/jdk16/hpux-pa_risc2.0w/libprofilerinterface.sl".
Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Classes/jconsole.jar ", should be -rw-r--r-- , they are lrwxr-xr-x .
Repaired "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Classes/jconsole.jar ".
User differs on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Home/lib", should be 95, user is 0.
Repaired "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Home/lib".
User differs on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Libraries", should be 95, user is 0.
Repaired "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Libraries".
Permissions differ on "usr/bin/awk", should be -rwxr-xr-x , they are -r-xr-xr-x .
Repaired "usr/bin/awk".
Permissions differ on "usr/bin/iconv", should be -r-xr-xr-x , they are -rwxr-xr-x .
Repaired "usr/bin/iconv".
Permissions differ on "usr/lib/libcharset.1.dylib", should be -r-xr-xr-x , they are -rw-r--r-- .
Repaired "usr/lib/libcharset.1.dylib".
Permissions differ on "usr/lib/libiconv.2.dylib", should be -r-xr-xr-x , they are -rw-r--r-- .
Repaired "usr/lib/libiconv.2.dylib".
Group differs on "usr/lib/libutil1.0.dylib", should be 80, group is 0.
Repaired "usr/lib/libutil1.0.dylib".
Group differs on "usr/lib/libz.1.1.3.dylib", should be 80, group is 0.
Repaired "usr/lib/libz.1.1.3.dylib".
Group differs on "usr/lib/libz.dylib", should be 80, group is 0.
Repaired "usr/lib/libz.dylib".
Permissions differ on "usr/share/file/magic/cafebabe", should be -rw-r--r-- , they are -r--r--r-- .
Repaired "usr/share/file/magic/cafebabe".
Permissions differ on "usr/share/file/magic/compress", should be -rw-r--r-- , they are -r--r--r-- .
Repaired "usr/share/file/magic/compress".
Permissions differ on "usr/share/file/magic/database", should be -rw-r--r-- , they are -r--r--r-- .
Repaired "usr/share/file/magic/database".
Permissions differ on "usr/share/file/magic/erlang", should be -rw-r--r-- , they are -r--r--r-- .
Repaired "usr/share/file/magic/erlang".
Permissions differ on "usr/share/file/magic/filesystems", should be -rw-r--r-- , they are -r--r--r-- .
Repaired "usr/share/file/magic/filesystems".
Permissions differ on "usr/share/file/magic/fonts", should be -rw-r--r-- , they are -r--r--r-- .
Repaired "usr/share/file/magic/fonts".
Permissions differ on "usr/share/file/magic/fortran", should be -rw-r--r-- , they are -r--r--r-- .
Repaired "usr/share/file/magic/fortran".
Permissions differ on "usr/share/file/magic/linux", should be -rw-r--r-- , they are -r--r--r-- .
Repaired "usr/share/file/magic/linux".
Permissions differ on "usr/share/file/magic/lisp", should be -rw-r--r-- , they are -r--r--r-- .
Repaired "usr/share/file/magic/lisp".
Permissions differ on "usr/share/file/magic/python", should be -rw-r--r-- , they are -r--r--r-- .
Repaired "usr/share/file/magic/python".
Permissions differ on "usr/share/file/magic/troff", should be -rw-r--r-- , they are -r--r--r-- .
Repaired "usr/share/file/magic/troff".
Permissions differ on "usr/share/file/magic/windows", should be -rw-r--r-- , they are -r--r--r-- .
Repaired "usr/share/file/magic/windows".
Permissions differ on "usr/share/man/man1/bzcmp.1", should be lrwxr-xr-x , they are lrw-r--r-- .
Repaired "usr/share/man/man1/bzcmp.1".
Permissions differ on "usr/share/man/man1/bzegrep.1", should be lrwxr-xr-x , they are lrw-r--r-- .
Repaired "usr/share/man/man1/bzegrep.1".
Permissions differ on "usr/share/man/man1/bzfgrep.1", should be lrwxr-xr-x , they are lrw-r--r-- .
Repaired "usr/share/man/man1/bzfgrep.1".
Permissions differ on "usr/share/man/man1/bzless.1", should be lrwxr-xr-x , they are lrw-r--r-- .
Repaired "usr/share/man/man1/bzless.1".
Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Resources/JavaPlugin Cocoa.bundle/Contents/Resources/Java/deploy.jar", should be -rw-r--r-- , they are lrwxr-xr-x .
Repaired "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Resources/JavaPlugin Cocoa.bundle/Contents/Resources/Java/deploy.jar".
Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Resources/JavaPlugin Cocoa.bundle/Contents/Resources/Java/libdeploy.jnilib", should be -rwxr-xr-x , they are lrwxr-xr-x .
Repaired "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Resources/JavaPlugin Cocoa.bundle/Contents/Resources/Java/libdeploy.jnilib".
ACL found but not expected on "private/etc/apache2/httpd.conf".
Repaired "private/etc/apache2/httpd.conf".
ACL found but not expected on "private/etc/apache2/users".
Repaired "private/etc/apache2/users".
ACL found but not expected on "Library/Preferences/Audio".
Repaired "Library/Preferences/Audio".
ACL found but not expected on "Library/Preferences/com.apple.alf.plist".
Repaired "Library/Preferences/com.apple.alf.plist".
ACL found but not expected on "Library/Scripts/Script Editor Scripts/Dialogs/Dialog - 1 Btn.scpt".
Repaired "Library/Scripts/Script Editor Scripts/Dialogs/Dialog - 1 Btn.scpt".
Warning: SUID file "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAg ent" has been modified and will not be repaired.
ACL found but not expected on "System/Library/Keychains/X509Anchors".
Repaired "System/Library/Keychains/X509Anchors".
ACL found but not expected on "private/etc/hostconfig".
Repaired "private/etc/hostconfig".
ACL found but not expected on "private/etc/hosts".
Repaired "private/etc/hosts".
ACL found but not expected on "private/var/db/launchd.db/com.apple.launchd".
Repaired "private/var/db/launchd.db/com.apple.launchd".
ACL found but not expected on "private/var/yp/binding".
Repaired "private/var/yp/binding".
*Permissions repair complete*
*Verify permissions for “Hybrid”*
Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Classes/jconsole.ja r", should be lrwxr-xr-x , they are lrw-r--r-- .
User differs on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib", should be 0, user is 95.
User differs on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Libraries", should be 0, user is 95.
Permissions differ on "System/Library/Java/Support/Deploy.bundle/Contents/Resources/JavaPluginCocoa.b undle/Contents/Resources/Java/deploy.jar", should be lrwxr-xr-x , they are lrw-r--r-- .
Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Classes/jconsole.jar ", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/A/Resources/Deploy.bundle/ Contents/Resources/JavaPluginCocoa.bundle/Contents/Resources/Java/deploy.jar", should be lrwxr-xr-x , they are lrw-r--r-- .
Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Resources/JavaPlugin Cocoa.bundle/Contents/Resources/Java/deploy.jar", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Resources/JavaPlugin Cocoa.bundle/Contents/Resources/Java/libdeploy.jnilib", should be -rwxr-xr-x , they are lrwxr-xr-x .
ACL found but not expected on "private/etc/apache2/httpd.conf".
ACL found but not expected on "private/etc/apache2/users".
ACL found but not expected on "Library/Preferences/Audio".
ACL found but not expected on "Library/Preferences/com.apple.alf.plist".
ACL found but not expected on "Library/Scripts/Script Editor Scripts/Dialogs/Dialog - 1 Btn.scpt".
Warning: SUID file "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAg ent" has been modified and will not be repaired.
ACL found but not expected on "System/Library/Keychains/X509Anchors".
ACL found but not expected on "private/etc/hostconfig".
ACL found but not expected on "private/etc/hosts".
ACL found but not expected on "private/var/db/launchd.db/com.apple.launchd".
ACL found but not expected on "private/var/yp/binding".
*Permissions verification complete*

jackjames wrote:
*Permissions repair complete*
as long as you see this, you're ok.
JGG

ACL change report

Hi Everyone,
I'm trying to create powershell script which would alert when ACL changes are made to shares, folders and subfolders running on multiple servers
What I have so far kind of works, I'm getting ACL report fine but how would I correctly diff ACL report from previous day withe current ACL report? When I do compare-object I'm getting permissions changed listed value without path. Here is what I have:
$shares = "C:\scripts\dirs.txt"
$ref = "C:\scripts\ref.csv"
$refchanged = "C:\scripts\ref.txt_$date"
$curracl = "C:\scripts\curracl.csv"
$date = get-date -uformat "%y%m%d.%H%M%S"
$output = "C:\scripts\result.txt"
gc $shares | % {
$folder = $_
$folders = Get-ChildItem -path $folder -force -recurse | Where {$_.PSIsContainer}
$dirs = $folders
ForEach ($d in $dirs)
get-acl -path $d.FullName | format-list -Property path, accesstostring | | Out-file -Append $curracl
$diff = compare-object -referenceobject $(get-content $ref) -differenceobject $(get-content $curracl) | fl | Out-file "C:\scripts\diff.txt"
$result = (gc C:\scripts\diff.txt)
Also, when I export to csv I'm getting permissions listed only for one user, the user listed first in directory ACL.
What am I missing here?

Hi,
When open the CSV, what it looks like? There should be two colum, one is path, another is accesstostring.
I run below command, got two colums:
get-acl e:\test | select path, accesstostring | export-csv e:\result.csv
Please also go through the below article to audit permissions using powershell:
Audit File Server Permissions Using PowerShell
http://blogs.technet.com/b/zarkatech/archive/2012/01/14/audit-file-server-permissions-using-powershell.aspx
Hope this helps.
Regards,
Regards, Yan Li

What does ACL mean in Verify Permissions?

I have been having problems since upgrading from Panther to Leopard on December 12 of 08. I think I have the majority of them addressed... I am running the disk utility and verifying and repairing permissions 2 times per month, emptying caches almost every day, and zapping the PRAM in order to address constant freeze-ups on startup... sometimes at the blue screen and sometimes the wheel just keeps turning, turning, turning, etc., but it still happens daily. Any ideas why on this one?
Now I am getting this message when verifying permissions:
ACL found, but not expected on "Applications/Utilities"
ACL found, but not expected on "Applications"
ACL found, but not expected on "Library"
What does ACL mean and why is it not expected?
Any answers? It would be appreciated.

Hi! Most have found that if they download the new combo update and reapply the update the acl messages in repair permissions disappear and the report will be clean for the first time. Tom

Permissions/ACL reporting

Similar Messages

Maybe you are looking for