Sandbox deny file-write-create

I'm working on a webcam capture app (sandboxed on Mac OS X for App Store submission).
I'm getting .GlobalPreferences plist create sandbox violation.
The same file is being accessed again and again in multiple scenarios and hence the sandbox violation is coming many times. I'm attaching the first deny report. In all the violations, the error is coming from CoreFoundation framework itself.
The preference is being accessed from /Users/labuser/Library/Preferences/ByHost/.GlobalPreferences.0AE3B6CF-AFFB-5E6A- 9D1B-0980457923BD.plist, but in a sandbox app, it should have been /Users/labuser/Library/Containers/com.test.TestApp/Data/Library/Preferences/ByHost/.GlobalPreferences.0AE3B6CF-AFFB-5E6A-9D1B-0980457923BD.plis t
Can anyone please help me resolve the error. Thanks for any help.
Sandoxd report============================================
Test App(18306) deny file-write-create /Users/labuser/Library/Preferences/ByHost/.GlobalPreferences.0AE3B6CF-AFFB-5E6A -9D1B-0980457923BD.plist.sb-d7c88888-f4A4yV
Process:           Test App [18306]
Path:                 /Applications/Test App.app/Contents/MacOS/Test App
Load Address: 0x100000000
Identifier:      Test App
Version:         ??? (???)
Code Type:    X86-64 (Native)
Parent Process: launchd [129]
Date/Time:       2012-11-14 18:23:31.848 +0530
OS Version:      Mac OS X 10.7.5 (11G63b)
Report Version: 7
Backtrace:
0   libsystem_kernel.dylib 0x00007fff9107aad2 __open + 10
1   CoreFoundation           0x00007fff942d5ba7 -[CFXPreferencesPropertyListSourceSynchronizer writePlistToDisk] + 1207
2   CoreFoundation           0x00007fff9429e5d5 -[CFXPreferencesPropertyListSourceSynchronizer synchronizeAlreadyFlocked] + 613
3   CoreFoundation           0x00007fff9429e319 -[CFXPreferencesPropertyListSourceSynchronizer synchronize] + 425
4   CoreFoundation           0x00007fff9429df9c -[CFXPreferencesPropertyListSource synchronize] + 108
5   CoreFoundation           0x00007fff942cba12 -[CFXPreferencesSearchListSource synchronize] + 98
6   CoreFoundation           0x00007fff942a9a5c __CFXPreferencesGetSearchListForBundleID + 796
7   CoreFoundation           0x00007fff942a96f8 ___CFXPreferencesCopyAppValue_block_invoke_1 + 24
8   CoreFoundation           0x00007fff942a969a CFPreferencesCopyAppValue + 218
9   CoreFoundation           0x00007fff942a94ad CFPreferencesGetAppBooleanValue + 29
10 QTKit                             0x00007fff953aaac6 QTDebugSettingGetKeyAsBOOL + 32
11 QTKit                             0x00007fff954259a9 -[QTCaptureSession init] + 670
12 Test App                       0x000000010000206f main + 870 (MTestApp.mm:421)
13 Test App                       0x0000000100001c00 start + 52

Nothing. The bane of having sandboxed apps.

Similar Messages

ICloud Notes app is logging lots of errors deny file-write-create externalrecordsworkfiles et al

I am getting intermittent error in the log, when using Notes in iCloud storage. When the errors come, they come in large batches.
Like this, many of them (dozens in one note-writing session)
2/11/13 1:04:17.525 PM sandboxd[1097]: ([363]) Notes(363) deny file-write-create /Library/Caches/com.apple.coredata.externalrecordsworkfiles
And fewer of these:
2/11/13 1:00:52.000 PM kernel[0]: Sandbox: sandboxd(1097) deny mach-lookup com.apple.coresymbolicationd
And one of these:
2/11/13 12:52:47.130 PM sandboxd[1090]: ([1091]) mdworker(1091) deny file-write-owner /Users/xxxxxxxx/Library/Containers/com.apple.Notes/Data/Library/Notes/NotesV1.s toredata-wal (import fstype:hfs fsflag:480D100 flags:240000005F diag:0 uti:com.apple.notes.externalrecord plugin:/Library/Spotlight/Notes.mdimporter - find suspect file using: sudo mdutil -t 5593589)
It is clear to me Notes is having problems. I've seen this when using Notes since upgrading to 10.8, but also after upgrade to 10.8.2 recently (MBPro 2011 13", SRAM disk). I go typing away in toes but I see the Console icone bouncing in the dock while I'm working.
I'll run disk-verify-fix but I'm not seeing a lot of relevant entries, just this so far:
Verifying permissions for “Macintosh HD”
Group differs on “Library/Java”; should be 0; group is 80.
Permissions differ on “Library/Java”; should be drwxr-xr-x ; they are drwxrwxr-x .
Permissions differ on “System/Library/Frameworks/CoreGraphics.framework/CoreGraphics”; should be lrwxrwxrwx ; they are lrwxr-xr-x .
Permissions differ on “System/Library/Frameworks/CoreGraphics.framework/Resources”; should be lrwxrwxrwx ; they are lrwxr-xr-x .
Permissions differ on “System/Library/Frameworks/CoreGraphics.framework/Versions/Current”; should be lrwxrwxrwx ; they are lrwxr-xr-x .
- all permissions now fixed.

When you say using the JDK you mean just using a simple text editor and command line to compile?
I'm not too bothered about decompilation as I doubt anyone would go though the effort to decompile this particular program. As it currently stands I'm the only one known in my college class to try my hand at Java anyway. Anyone else handing a java project in would be very suspicious.
How big would the program be if the JVM was included? Is it an intricate process to combine the two?
I am aware that any code can be decompiled but e.g. VB programs can only be decompiled into assembly... atleast I have yet to see a proper VB decompiler in action.
The app.path Java equivelant I need so the files needed by the program which should be in the same directory can be found with ease.
What compiler did JBuilder come with? It's own or did they simply include Sun's?
Whats the general opinion of V J++? is it pretty much Java or has M$ screwed it over and turned it into their own?
When an argument is passed to a method in Java is it referenced in memory or is a copy created? How do I pass an array to a method? and not create a copy of it? ref?
Can applets perform read and write actions on the machine it is stored? Can I refuse connections if a client is already connected?
Thanx

Preview(610) deny file-write-create issue

I was reviewing a document in Preview (a PDF that I downloaded from the internet) and added annotations with notes and rectangles - frequently using cmd-S to save versions (I could see the older versions ising "Revert document..." After I closed and re-opened the document (and reverted to my home time zone (I did the work on a plane) all but my first edits were gone. In addition, I keep getting asked if I want to open a file downloaded from the Internet. Very odd. I went into Console and saw a series if items:
2/25/12 12:06:58.628 PM sandboxd: ([610]) Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-oaMVR0
2/25/12 12:07:29.047 PM sandboxd: ([610]) Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-C7m4lN
2/25/12 12:07:59.467 PM sandboxd: ([610]) Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-5n0NJe
2/25/12 12:08:29.914 PM sandboxd: ([610]) Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-saU9Th
2/25/12 12:09:00.355 PM sandboxd: ([610]) Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-OeeJNl
2/25/12 12:09:30.782 PM sandboxd: ([610]) Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-G67ylo
2/25/12 12:10:01.203 PM sandboxd: ([610]) Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-C2pDW5
2/25/12 12:10:31.642 PM sandboxd: ([610]) Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-ewnB2Q
2/25/12 12:11:02.066 PM sandboxd: ([610]) Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-KdQbPR
2/25/12 12:11:32.492 PM sandboxd: ([610]) Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-9madk1
2/25/12 12:12:02.928 PM sandboxd: ([610]) Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-5z8uop
2/25/12 12:12:33.356 PM sandboxd: ([610]) Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-tfmgi6
2/25/12 12:13:03.780 PM sandboxd: ([610]) Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-FbgwGV
2/25/12 12:13:34.201 PM sandboxd: ([610]) Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-ClcLCU
2/25/12 12:14:04.631 PM sandboxd: ([610]) Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-nYrhpk
Expanding one of them, I see this:
Preview(610) deny file-write-create /Users/paul/Library/Preferences/ByHost/.GlobalPreferences.4303C8C3-A534-54DA-BF D2-08D9A393F8FD.plist.sb-d2a9a742-Gfz2WE
Process:         Preview [610]
Path:            /Applications/Preview.app/Contents/MacOS/Preview
Load Address:    0x107587000
Identifier:      Preview
Version:         ??? (???)
Code Type:       X86-64 (Native)
Parent Process: launchd [274]
Date/Time:       2012-02-25 10:14:34.657 -0800
OS Version:      Mac OS X Server 10.7.3 (11D50)
Report Version: 7
Backtrace:
0   libsystem_kernel.dylib                  0x00007fff8850aad2 __open + 10
1   CoreFoundation                          0x00007fff86191b37 -[CFXPreferencesPropertyListSourceSynchronizer writePlistToDisk] + 343
2   CoreFoundation                          0x00007fff8615a8e5 -[CFXPreferencesPropertyListSourceSynchronizer synchronizeAlreadyFlocked] + 613
3   CoreFoundation                          0x00007fff8615a639 -[CFXPreferencesPropertyListSourceSynchronizer synchronize] + 441
4   CoreFoundation                          0x00007fff8619886f __-[CFXPreferencesPropertyListSource synchronizeInBackgroundWithCompletionBlock:]_block_invoke_1 + 111
5   libdispatch.dylib                       0x00007fff8c9fc8ba _dispatch_call_block_and_release + 18
6   libdispatch.dylib                       0x00007fff8c9fe10a _dispatch_queue_drain + 264
7   libdispatch.dylib                       0x00007fff8c9fdf66 _dispatch_queue_invoke + 54
8   libdispatch.dylib                       0x00007fff8c9fd760 _dispatch_worker_thread2 + 198
9   libsystem_c.dylib                       0x00007fff872273da _pthread_wqthread + 316
10 libsystem_c.dylib                       0x00007fff87228b85 start_wqthread + 13
Binary Images:
    0x7fff86111000 -     0x7fff862e5fff com.apple.CoreFoundation (6.7.1 - 635.19) <57B77925-9065-38C9-A05B-02F4F9ED007C> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
    0x7fff871d7000 -     0x7fff872b4fef libsystem_c.dylib (763.12.0 - compatibility 1.0.0) <FF69F06E-0904-3C08-A5EF-536FAFFFDC22> /usr/lib/system/libsystem_c.dylib
    0x7fff884f4000 -     0x7fff88514fff libsystem_kernel.dylib (1699.23.2 - compatibility 1.0.0) <55377210-60A0-3F33-9D45-B2D19AA91859> /usr/lib/system/libsystem_kernel.dylib
    0x7fff8c9fb000 -     0x7fff8ca09fff libdispatch.dylib (187.7.0 - compatibility 1.0.0) <712AAEAC-AD90-37F7-B71F-293FF8AE8723> /usr/lib/system/libdispatch.dylib
Not sure what to do. Have started redoing 3 hours of work saving, closing and reopening. Still get the "Do you want to open a file downloaded from the Internet" but the recent work appears to be there. VERY UNNERVING that so much work could be lost.
I should also mention that my computer defaults to opening PDFs with Adobe Reader but for this one I used command-I to change the default application to Preview since it was so much better at annotating (or so I thought).
Any insight or suggestions? Just tried resetting permissions with Disk Utility and this time it did not ask if I wanted to open a downloaded file.
Paul

Repairing the permissions of a home folder in Lion is a complicated procedure. I don’t know of a simpler one that always works.
Launch the Terminal application by entering the first few letters of its name into a Spotlight search. If that doesn’t work, then in the Finder, press the key combination shift-command-U. The application is in the folder that opens.
Drag or copy – do not type – the following line into the Terminal window, then press return:
chmod -R -N ~
If you get an error message about permissions, enter this:
sudo !!
You'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning not to screw up.
Next, boot from your recovery partition by holding down the key combination command-R at startup. Release the keys when you see a gray screen with a spinning dial.
When the recovery desktop appears, select Utilities ▹ Terminal from the menu bar.
In the Terminal window, enter “resetpassword” (without the quotes) and press return. A Reset Password window opens.
Select your boot volume if not already selected.
Select your username from the menu labeled Select the user account if not already selected.
Under Reset Home Directory Permissions and ACLs, click the Reset button.
Select  ▹ Restart from the menu bar.

"deny file-write-create"-errors in log system.log

Hi,
since I upgraded Lion I got tons of these messages in my logs:
Jul 25 21:11:58 neptun sandboxd[5347] ([4420]): Preview(4420) deny file-write-create /Users/user/Library/Preferences/ByHost/.GlobalPreferences.146446A7-88D0-5241-85 F7-F6FDD0201B5F.plist.XTJXHr4
Jul 25 21:12:29 neptun sandboxd[5348] ([4420]): Preview(4420) deny file-write-create /Users/user/Library/Preferences/ByHost/.GlobalPreferences.146446A7-88D0-5241-85 F7-F6FDD0201B5F.plist.86EVSpI
Jul 25 21:12:59 neptun sandboxd[5349] ([4420]): Preview(4420) deny file-write-create /Users/user/Library/Preferences/ByHost/.GlobalPreferences.146446A7-88D0-5241-85 F7-F6FDD0201B5F.plist.CJaoJoj
Jul 25 21:13:30 neptun sandboxd[5350] ([4420]): Preview(4420) deny file-write-create /Users/user/Library/Preferences/ByHost/.GlobalPreferences.146446A7-88D0-5241-85 F7-F6FDD0201B5F.plist.ZGxllUy
Jul 25 21:14:00 neptun sandboxd[5351] ([4420]): Preview(4420) deny file-write-create /Users/user/Library/Preferences/ByHost/.GlobalPreferences.146446A7-88D0-5241-85 F7-F6FDD0201B5F.plist.NApWQdS
Jul 25 21:14:31 neptun sandboxd[5352] ([4420]): Preview(4420) deny file-write-create /Users/user/Library/Preferences/ByHost/.GlobalPreferences.146446A7-88D0-5241-85 F7-F6FDD0201B5F.plist.w1isGGi
Jul 25 21:15:02 neptun sandboxd[5361] ([4420]): Preview(4420) deny file-write-create /Users/user/Library/Preferences/ByHost/.GlobalPreferences.146446A7-88D0-5241-85 F7-F6FDD0201B5F.plist.TC4h3SQ
So this is just Preview adding this every 30 seconds to the logs. Similar errors occur, for example, when Spotlight indexes movies.
Does anyone have an idea what is causing this and how to fix it?
Thanks,
Stefan

Mine looks like this:
drwx------ 251 stefan staff     8534 27 Jul 15:29 ByHost
And the first few lines look like this:
drwx------+ 763 stefan staff    25942 27 Jul 15:41 .
0: group:everyone deny delete
drwx------@ 60 stefan staff     2040 25 Jul 09:27 ..
0: group:everyone deny delete
But as I said in my initial post, such errors do not only appear for the ByHost folder. It happens for various preferences, for example, when Spotlight indexes a M4V movie and tries to create/access a codec property file. Or here are some other examples when Safari is running:
sandboxd[4159] ([4152]): Safari Webpage P(4152) deny file-read-data /Users/stefan/Library/Preferences/com.apple.DownloadAssessment.plist
Jul 27 12:41:16 neptun sandboxd[4183] ([4182]): Safari Webpage P(4182) deny file-read-data /Applications/Safari.app/Contents/Resources/Defaults.plist
Jul 27 12:41:16 neptun sandboxd[4183] ([4182]): Safari Webpage P(4182) deny file-read-data /Applications/Safari.app/Contents/Resources/English.lproj
Thanks!

QuickLookSatellite deny file-write-create in Console App

I have a MacBook Pro Mid 2010 with Mountain Lion 10.8.1.
In the console I found some log messages like the following:
QuickLookSatelli(643) deny file-write-create /Users/myusername/Library/Caches/com.apple.quicklook.satellite
or
QuickLookSatelli(643) deny file-read-data /Library/Preferences/.GlobalPreferences.plist
What could be the problem?
Thanks in advance.

Mine looks like this:
drwx------ 251 stefan staff     8534 27 Jul 15:29 ByHost
And the first few lines look like this:
drwx------+ 763 stefan staff    25942 27 Jul 15:41 .
0: group:everyone deny delete
drwx------@ 60 stefan staff     2040 25 Jul 09:27 ..
0: group:everyone deny delete
But as I said in my initial post, such errors do not only appear for the ByHost folder. It happens for various preferences, for example, when Spotlight indexes a M4V movie and tries to create/access a codec property file. Or here are some other examples when Safari is running:
sandboxd[4159] ([4152]): Safari Webpage P(4152) deny file-read-data /Users/stefan/Library/Preferences/com.apple.DownloadAssessment.plist
Jul 27 12:41:16 neptun sandboxd[4183] ([4182]): Safari Webpage P(4182) deny file-read-data /Applications/Safari.app/Contents/Resources/Defaults.plist
Jul 27 12:41:16 neptun sandboxd[4183] ([4182]): Safari Webpage P(4182) deny file-read-data /Applications/Safari.app/Contents/Resources/English.lproj
Thanks!

Storeaccount deny file-write-data

Given the following ASLQuery
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<array>
<dict>
<key>key</key>
<string>Message</string>
<key>op</key>
<integer>97</integer>
<key>value</key>
<string>storeaccount</string>
</dict>
<dict>
<key>key</key>
<string>Message</string>
<key>op</key>
<integer>97</integer>
<key>value</key>
<string>sandbox</string>
</dict>
</array>
</plist>
Query resilts
02/04/2015 8:22:51.000 PM kernel[0]: Sandbox: storeaccountd(381) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/04/2015 8:22:51.000 PM kernel[0]: Sandbox: storeaccountd(381) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/04/2015 8:26:11.000 PM kernel[0]: Sandbox: storeaccountd(360) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/04/2015 8:26:11.000 PM kernel[0]: Sandbox: storeaccountd(360) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/05/2015 4:43:45.000 PM kernel[0]: Sandbox: storeaccountd(414) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/05/2015 4:43:45.000 PM kernel[0]: Sandbox: storeaccountd(414) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/06/2015 8:37:58.000 AM kernel[0]: Sandbox: storeaccountd(364) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/06/2015 8:37:58.000 AM kernel[0]: Sandbox: storeaccountd(364) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/06/2015 10:56:45.000 AM kernel[0]: Sandbox: storeaccountd(915) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/06/2015 3:26:51.000 PM kernel[0]: Sandbox: storeaccountd(355) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/06/2015 3:26:51.000 PM kernel[0]: Sandbox: storeaccountd(355) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/07/2015 8:31:31.000 AM kernel[0]: Sandbox: storeaccountd(344) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/07/2015 8:31:31.000 AM kernel[0]: Sandbox: storeaccountd(344) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/08/2015 11:55:29.000 AM kernel[0]: Sandbox: storeaccountd(9872) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/08/2015 12:35:27.000 PM kernel[0]: Sandbox: storeaccountd(364) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/08/2015 12:35:27.000 PM kernel[0]: Sandbox: storeaccountd(364) deny file-write-data /Users/CBMcK/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
Just what is happening? It sure reads like a bug in iBooks.
Yosemite 10.10.2

Have some more
02/14/2015 9:45:54.000 PM kernel[0]: Sandbox: storeaccountd(409) deny file-write-data /Users/UsrId/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/14/2015 9:45:54.000 PM kernel[0]: Sandbox: storeaccountd(409) deny file-write-data /Users/UsrId/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/14/2015 9:57:07.000 PM kernel[0]: Sandbox: storeaccountd(406) deny file-write-data /Users/UsrId/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/14/2015 9:57:07.000 PM kernel[0]: Sandbox: storeaccountd(406) deny file-write-data /Users/UsrId/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/15/2015 1:46:44.000 PM kernel[0]: Sandbox: storeaccountd(495) deny file-write-data /Users/UsrId/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/15/2015 1:46:44.000 PM kernel[0]: Sandbox: storeaccountd(495) deny file-write-data /Users/UsrId/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/15/2015 2:00:31.000 PM kernel[0]: Sandbox: storeaccountd(406) deny file-write-data /Users/UsrId/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/15/2015 2:00:31.000 PM kernel[0]: Sandbox: storeaccountd(406) deny file-write-data /Users/UsrId/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/15/2015 2:07:05.000 PM kernel[0]: Sandbox: storeaccountd(405) deny file-write-data /Users/UsrId/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/15/2015 2:07:05.000 PM kernel[0]: Sandbox: storeaccountd(405) deny file-write-data /Users/UsrId/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/16/2015 9:17:25.000 AM kernel[0]: Sandbox: storeaccountd(400) deny file-write-data /Users/UsrId/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/16/2015 9:17:25.000 AM kernel[0]: Sandbox: storeaccountd(400) deny file-write-data /Users/UsrId/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/17/2015 1:28:53.000 PM kernel[0]: Sandbox: storeaccountd(421) deny file-write-data /Users/UsrId/Library/Preferences/com.rockysandstudio.Battery-Diag.plist
02/17/2015 1:28:53.000 PM kernel[0]: Sandbox: storeaccountd(421) deny file-write-data /Users/UsrId/Library/Preferences/com.rockysandstudio.Battery-Diag.plist

Sandbox deny file-read-metadata /private/var/tmp

Hi,
I have Berkeley DB 5.2.28.
And I tried to use Berkeley DB on iOS 4.3.
I wrote;
printf (stderr, "db open - 1");
ret = dbenv.open(strDBdir,
DB_CREATE |
DB_INIT_LOCK |
DB_INIT_LOG |
DB_INIT_MPOOL |
DB_INIT_TXN |
DB_THREAD |
DB_RECOVER,
S_IRUSR | S_IWUSR);
printf (stderr, "db open - 2");
I runned this app on iPod 4 (iOS 4.3), and then in xCode's Organizer found a message: "sandbox[363] <Notice>: myapp(362) deny file-read-metadata /private/var/tmp", between "db open - 1" and "db open - 2".
How to resolve it?
Please, help me.
Thank you.

Hi,
I assume you have correctly followed and built BDB 5.2.28 for Apple iOS by following the guide for Building Berkeley DB for UNIX/POSIX and the notes specific to Apple iOS (iPhone OS).
The error message you reported:
sandbox[363] <Notice>: myapp(362) deny file-read-metadata /private/var/tmpis not an error from the BDB layer, but rather from the OS layer. It could point to insufficient privileges or rights (to write in that /private/var/tmp directory) or maybe a profile / access control list that is not configured correctly to allow the user you're running under to read metadata and data for a file; for example, make sure you have something like this in your sandbox profile:
(allow file-write* file-read-data file-read-metadata
(regex "^/path_to_BDB_environment__strDBdir")
(regex "^(/private)?/var/tmp/")
(regex "^(/private)?/tmp/"))If this does not help then I suggest you post on the Apple discussion forums.
Regards,
Andrei

Coreaudiod sandbox deny AKAI EIE usb

After installing Mountain Lion, AKAI EIE Pro device stopped working (interface is not visible in Sound panel). System log points to sandbox issue
e.g.
sandboxd[517] ([282]): coreaudiod(282) deny file-write-create /private/var/empty/AkaiEIE.usbsettings.xml
is there any workaround or driver needs to be "sandboxed" ?

We've been talking about it here: http://community.akaipro.com/akai_professional/topics/drivers_for_eie_pro_and_mo untain_lion
According to their twitter feed, they said the drivers will be out soon. However, they also tweeted:
Akai_Pro
It is expected today Apple will release Mountain Lion. We have tested our products and will provide compatibility information shortly.
7/25/12 4:29 AM
when Moutain Lion came out. Guess they didn't get the dev preview.

Kernel: Sandbox: fmfd deny file-read-metadata errors

Hello there,
I am befuddled by this one and have checked many forums for a solution but have yet to find one. Since upgrading to MacOS 10.10 on my Mac Mini Mid 2012, I am receiving quite a few messages on my console related to fmfd. It doesn't matter how many times I clean install. As soon as I turn on iCloud bam. They just roll in.
11/4/14 8:48:39.000 PM kernel[0]: Sandbox: fmfd(331) deny file-read-metadata /Volumes/xxxxxxxx
11/4/14 8:48:39.000 PM kernel[0]: Sandbox: fmfd(331) deny file-read-metadata /Volumes/xxxxxxxx
11/4/14 8:48:39.000 PM kernel[0]: Sandbox: fmfd(331) deny file-read-metadata /Volumes/xxxxxxxx
11/4/14 8:48:39.000 PM kernel[0]: Sandbox: fmfd(331) deny file-read-metadata /Volumes/xxxxxxxx
11/4/14 8:48:39.000 PM kernel[0]: Sandbox: fmfd(331) deny file-read-metadata /Volumes/xxxxxxxx
11/4/14 8:48:39.000 PM kernel[0]: Sandbox: fmfd(331) deny file-read-metadata /Volumes/xxxxxxxx
Sample report:
fmfd(331) deny file-read-metadata /Volumes/xxxxxx
Process:         fmfd [331]
Path:            /usr/libexec/fmfd
Load Address:    0x101f98000
Identifier:      fmfd
Version:         ??? (???)
Code Type:       x86_64 (Native)
Parent Process: launchd [1]
Date/Time:       2014-11-04 20:51:11.507 -0600
OS Version:      Mac OS X 10.10 (14A389)
Report Version: 8
Anyone have any insight on how to resolve this or even filter them out? I tried filtering them but no dice.
j

Hello there,
Thank you for posting this. After applying 10.10.1 the messages came back and I am not doing the defaults write again. My home directory is on a spare drive as well. I had no choice due to the size of my iTunes library and simply wanting to keep the home directory location consistent. As it turns out, the same thing happens to another similar directory that i've created. This one is a mobile directory and not just a moved user home directory. I thought maybe resetting ACLs would do the trick but it does not.
Also - I do not have nor have I ever had Find my Mac turned on for this machine. The one machine it is turned on is my laptop (3rd machine for work) and that one is not showing errors. I built all three of these in identical fashion with clean installs etc. The only difference is the laptop has a solo drive and that's it. Something is breaking. I wish I could follow where its breaking. I hate the messages.
My other option is to make it so that all applications can use this token/user in my keychain. Is this dangerous?

File Write Keyword Tag don't create a xmp file

Hi,
I use PSE 8 with WIN7 64 Ultimate.
When I used the File > Write Keyword Tag command, no xmp file is created. I saw, that the filename was renamed to xxx_edTMP-1.NEF for a short time and than the original name is show. The changedate of the file is not changed Sometimes the file is not renamed the new name is xxxx_edTMP-1.NEF.
Why?
Nils

I assume that you are trying to write tags assigned to a Raw original.
There is a bug that sometimes PSE does not write tags (or other metadata) to .xmp for Raw files. This usually depends on the type of file; this command never seems to work for .NEF files.
A workaround is to use John R Ellis's psedbtool

Sandbox: xcscredd(10021) deny file-read-metadata /Users or other ID

What is this always listing on console screen ,it change to another number and still listing after I command kill it all .
So many following message on console screen everyday, how to make it stop running ?
Sandbox: xcscredd(10021) deny file-read-metadata /Users
Any Mac user have solution fix it ?

Have you looked at the previous discussions listed on the right side of this page under the heading "More Like This"?

I'm trying to write a VI that updates a file each time it is run, but on a new day a new file is created which is updated until a new day begins.

I have written a VI to create and update a file as many times as needed on any given day. On any subsequent day a new file is created which for that day will be updated each time the VI is run and so on. The problem is that when I run the VI the first time of a new day, ie when the file is created only data is written to the file and not the header data. When the file is appended, header data, and regular data is properly written to the file. Can anyone tell me how to correct this problem? A copy of the VI that I wrote is attached.
Thanks,
Chuck M.
Solved!
Go to Solution.
Attachments:
File - create new on date change.vi ‏15 KB

You had the header information written when there wasn't an existing file, then you overwrote that file with another file consisting only of the data because you wired the "append to file? (new file:F)" the same for both functions (F causes it to create a new file). I put the header writing function in a Case structure because you only want it to execute when this is a new file (otherwise it'll overwrite what's there). Wire the path straight through the False case. I wired a TRUE to the data writing function to always append (because there will always be a file by the time the program gets there).
Jim
PS - a few other observations
Avoid sequence structures
You don't need the property node
Use Path functions (not string)
Message Edited by jcarmody on 04-13-2009 05:58 PM
Jim
You're entirely bonkers. But I'll tell you a secret. All the best people are. ~ Alice
Attachments:
examp.jpg ‏19 KB

Why multiple log files are created while using transaction in berkeley db

we are using berkeleydb java edition db base api, we have already read/write CDRFile of 9 lack rows with transaction and
without transaction implementing secondary database concept the issues we are getting are as follows:-
with transaction----------size of database environment 1.63gb which is due to no. of log files created each of 10 mb.
without transaction-------size of database environment 588mb and here only one log file is created which is of 10mb. so we want to know how REASON CONCRETE CONCLUSION ..
how log files are created and what is meant of using transaction and not using transaction in db environment and what are this db files db.001,db.002,_db.003,_db.004,__db.005 and log files like log.0000000001.....plz reply soon

we are using berkeleydb java edition db base api, If you are seeing __db.NNN files in your environment root directory, these are environment's shared region files. And since you see these you are using Berkeley DB Core (with the Java/JNI Base API), not Berkeley DB Java Edition.
with transaction ...
without transaction ...First of all, do you need transactions or not? Review the documentation section called "Why transactions?" in the Berkeley DB Programmer's Reference Guide.
without transaction-------size of database environment 588mb and here only one log file is created which is of 10mb.There should be no logs created when transactions are not used. That single log file has likely remained there from the previous transactional run.
how log files are created and what is meant of using transaction and not using transaction in db environment and what are this db files db.001,db.002,_db.003,_db.004,__db.005 and log files like log.0000000001Have you reviewed the basic documentations references for Berkeley DB Core?
- Berkeley DB Programmer's Reference Guide
in particular sections: The Berkeley DB products, Shared memory regions, Chapter 11. Berkeley DB Transactional Data Store Applications, Chapter 17. The Logging Subsystem.
- Getting Started with Berkeley DB (Java API Guide) and Getting Started with Berkeley DB Transaction Processing (Java API Guide).
If so, you would have had the answers to these questions; the __db.NNN files are the environment shared region files needed by the environment's subsystems (transaction, locking, logging, memory pool buffer, mutexes), and the log.MMMMMMMMMM are the log files needed for recoverability and created when running with transactions.
--Andrei

Cant get list of files from a folder (even though the folder and files are created with the same app)

Ok so each character rolled with my app gets saved as an html file in a folder i create on the sdcard called RpgApp
the code to do this is
private async Task saveToHtmlCharacter(string name)
StorageFolder externalDevices = Windows.Storage.KnownFolders.RemovableDevices;
StorageFolder sdcard = (await externalDevices.GetFoldersAsync()).FirstOrDefault(); //Windows.Storage.ApplicationData.Current.LocalFolder;
var dataFolder = await sdcard.CreateFolderAsync("RpgApp",
CreationCollisionOption.OpenIfExists);
var file = await dataFolder.CreateFileAsync(name+".html",
CreationCollisionOption.ReplaceExisting);
using (StreamWriter writer = new StreamWriter(await file.OpenStreamForWriteAsync()))
writer.WriteLine("<html><head><title>Character File for " + z.charNameFirst + " " + z.charNameSecond + "</title></head><body>");
//trimed for the post
now this as i say works perfectly and i can confirm that the files show up in the "RpgApp"folder
now the next step is to have the app read the names of each of those html files and create a seperate button for each one named for the filename and with the filename as content (later i will link them up to load the html file they are named for in a webbrowser
panal)
here is the code that *should* do that
private async Task readFiles()
z.test.Clear();
StorageFolder externalDevices = Windows.Storage.KnownFolders.RemovableDevices;
StorageFolder folder = (await externalDevices.GetFolderAsync("RpgApp"));
IReadOnlyList<StorageFile> fileList = await folder.GetFilesAsync();
//z.test.Add("dummy");
foreach (StorageFile file in fileList)
z.test.Add(file.Name);
public async void buttonTest()
await readFiles();
CoreDispatcher dispatcher = CoreWindow.GetForCurrentThread().Dispatcher;
await dispatcher.RunAsync(CoreDispatcherPriority.Normal, () =>
foreach (string name in z.test)
Button button1 = new Button();
button1.Height = 75;
button1.Content = name;
button1.Name = name;
testStackPanal.Children.Add(button1);
now i say should as what i get is an error of "A first chance exception of type 'System.UnauthorizedAccessException' occurred in mscorlib.ni.dll" (2 of them in fact one after another)
more detailed error is at http://pastebin.com/3hBaZLQ9
now i went through checking line after line to find the error and line that causes it is:
StorageFolder folder = (await externalDevices.GetFolderAsync("RpgApp"));
in the readFiles method
i checked to make sure the case is right etc and its spot on, that IS the folder name, and remember my app creates that folder and creates the files that are inside that folder (and only files my app creates are in that folder) so it should have access
im 100% stuck its taken me all day to get the files to save and now i cant get them to list correctly
I have tested the button creation function with fake list data and that worked fine, as i say the error is when i tell it to look at the folder it created
all help most greatfully recieved

this was actually solved for me on another forum thread
async Task<bool> continueToReadAllFiles(StorageFolder folder)
if (folder == null)
return false;
if (folder.Name.Equals("RpgApp", StringComparison.CurrentCultureIgnoreCase))
var files = await folder.GetFilesAsync();
foreach (var file in files)
test.Add(file.Name);
return false;
var folders = await folder.GetFoldersAsync();
foreach (var child in folders)
if (!await continueToReadAllFiles(child))
return false;
return true;
public async void buttonTest()
test.Clear();
StorageFolder externalDevices = Windows.Storage.KnownFolders.RemovableDevices;
var folders = await externalDevices.GetFoldersAsync();
foreach (var folder in folders)
if (!await continueToReadAllFiles(folder))
break;
//.... commented out
...now i say solved this is more a workaround...but it works.
I would love to know why we cant just scan the RpgApp folder instead of having to scan the whole dc card and disregard all thats not in the RpgApp folder

The first binary file write operation for a new file takes progressively longer.

I have an application in which I am acquiring analog data from multiple
PXI-6031E DAQ boards and then writing that data to FireWire hard disks
over an extended time period (14 days). I am using a PXI-8145RT
controller, a PXI-8252 FireWire interface board and compatible FireWire
hard drive enclosures. When I start acquiring data to an empty
hard disk, creating files on the fly as well as the actual file I/O
operations are both very quick. As the number of files on the
hard drive increases, it begins to take considerably longer to complete
the first write to a new binary file. After the first write,
subsequent writes of the same data size to that same file are very
fast. It is only the first write operation to a new file that
takes progressively longer. To clarify, it currently takes 1 to 2
milliseconds to complete the first binary write of a new file when the
hard drive is almost empty. After writing 32, 150 MByte files,
the first binary write to file 33 takes about 5 seconds! This
behavior is repeatable and continues to get worse as the number of
files increases. I am using the FAT32 file system, required for
the Real-Time controller, and 80GB laptop hard drives. The
system works flawlessly until asked to create a new file and write the
first set of binary data to that file. I am forced to buffer lots
of data from the DAQ boards while the system hangs at this point.
The requirements for this data acquisition system do not allow for a
single data file so I can not simply write to one large file.
Any help or suggestions as to why I am seeing this behavior would be
greatly appreciated.

I am experiencing the same problem. Our program periodically monitors data and eventually save it for post-processing. While it's searching for suitable data, it creates one file for every channel (32 in total) and starts streaming data to these files. If it finds data is not suitable, it deletes the files and creates new ones.
On our lab, we tested the program on windows and then on RT and we did not find any problems.
Unfortunately when it was time to install the PXI on field (an electromechanic shovel on a copper mine) and test it, we've come to find that saving was taking to long and the program screwed up. Specifically when creating files (I.E. "New File" function). It could take 5 or more seconds to create a single file.
As you can see, field startup failed and we will have to modify our programs to workaround this problem and return next week to try again, with the additional time and cost involved. Not to talk about the bad image we are giving to our costumer.
I really like labview, but I am particularly upset beacuse of this problem. LV RT is supposed to run as if it was LV win32, with the obvious and expected differences, but a developer can not expect things like this to happen. I remember a few months ago I had another problem: on RT Time/Date function gives a wrong value as your program runs, when using timed loops. Can you expect something like that when evaluating your development platform? Fortunately, we found the problem before giving the system to our costumer and there was a relatively easy workaround. Unfortunately, now we had to hit the wall to find the problem.
On this particular problem I also found that it gets worse when there are more files on the directory. Create a new dir every N hours? I really think that's not a solution. I would not expect this answer from NI.
I would really appreciate someone from NI to give us a technical explanation about why this problem happens and not just "trial and error" "solutions".
By the way, we are using a PXI RT controller with the solid-state drive option.
Thank you.
Daniel R.
Message Edited by Daniel_Chile on 06-29-2006 03:05 PM

Sandbox deny file-write-create

Similar Messages

Maybe you are looking for