SUID errors after 10.5.3 update...

[vaporATX]

Anybody else getting these when you do a permission repair:

 

Started verify/repair permissions on disk disk0s2 Mephisto

Group differs on "bin/ps", should be 0, group is 80

Warning: SUID file "bin/ps" has been modified and will not be repaired

Warning: SUID file "System/Library/Extensions/webdav_fs.kext/Contents/Resources/load_webdav" has been modified and will not be repaired

Group differs on "usr/bin/ipcs", should be 0, group is 80

Permissions differ on "usr/bin/ipcs", should be -r-s--x--x , they are -rws--x--x

Warning: SUID file "usr/bin/ipcs" has been modified and will not be repaired

Group differs on "usr/bin/top", should be 0, group is 80

Warning: SUID file "usr/bin/top" has been modified and will not be repaired

Permissions differ on "usr/X11/lib/libX11.6.2.0.dylib", should be lrwxr-xr-x , they are -rwxr-xr-x

Group differs on "usr/libexec/load_hdi", should be 0, group is 80

Permissions differ on "usr/libexec/load_hdi", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/libexec/load_hdi" has been modified and will not be repaired

Warning: SUID file "System/Library/PrivateFrameworks/DiskManagement.framework/Versions/A/Resources/DiskManagementTool" has been modified and will not be repaired

Warning: SUID file "System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/Resources/Locum" has been modified and will not be repaired

Warning: SUID file "System/Library/PrivateFrameworks/Install.framework/Versions/A/Resources/runner" has been modified and will not be repaired

Warning: SUID file "System/Library/Frameworks/SystemConfiguration.framework/Versions/A/Resources/SCHelper" has been modified and will not be repaired

Group differs on "usr/sbin/scselect", should be 0, group is 80

Permissions differ on "usr/sbin/scselect", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/sbin/scselect" has been modified and will not be repaired

Group differs on "sbin/umount", should be 0, group is 80

Permissions differ on "sbin/umount", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "sbin/umount" has been modified and will not be repaired

Warning: SUID file "System/Library/PrivateFrameworks/Admin.framework/Versions/A/Resources/readconfig" has been modified and will not be repaired

Warning: SUID file "System/Library/PrivateFrameworks/Admin.framework/Versions/A/Resources/writeconfig" has been modified and will not be repaired

Group differs on "usr/bin/setregion", should be 0, group is 80

Permissions differ on "usr/bin/setregion", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/bin/setregion" has been modified and will not be repaired

Group differs on "usr/libexec/authopen", should be 0, group is 80

Permissions differ on "usr/libexec/authopen", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/libexec/authopen" has been modified and will not be repaired

Warning: SUID file "System/Library/CoreServices/Finder.app/Contents/Resources/OwnerGroupTool" has been modified and will not be repaired

Group differs on "usr/bin/login", should be 0, group is 80

Permissions differ on "usr/bin/login", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/bin/login" has been modified and will not be repaired

Group differs on "usr/lib/sa/sadc", should be 0, group is 80

Permissions differ on "usr/lib/sa/sadc", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/lib/sa/sadc" has been modified and will not be repaired

Group differs on "usr/libexec/chkpasswd", should be 0, group is 80

Permissions differ on "usr/libexec/chkpasswd", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/libexec/chkpasswd" has been modified and will not be repaired

Group differs on "usr/bin/lppasswd", should be 26, group is 80

Warning: SUID file "usr/bin/lppasswd" has been modified and will not be repaired

Group differs on "usr/bin/quota", should be 0, group is 80

Permissions differ on "usr/bin/quota", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/bin/quota" has been modified and will not be repaired

Group differs on "usr/bin/at", should be 0, group is 80

Permissions differ on "usr/bin/at", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/bin/at" has been modified and will not be repaired

Group differs on "usr/bin/atq", should be 0, group is 80

Permissions differ on "usr/bin/atq", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/bin/atq" has been modified and will not be repaired

Group differs on "usr/bin/atrm", should be 0, group is 80

Permissions differ on "usr/bin/atrm", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/bin/atrm" has been modified and will not be repaired

Group differs on "usr/bin/batch", should be 0, group is 80

Permissions differ on "usr/bin/batch", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/bin/batch" has been modified and will not be repaired

Group differs on "usr/bin/chfn", should be 0, group is 80

Permissions differ on "usr/bin/chfn", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/bin/chfn" has been modified and will not be repaired

Group differs on "usr/bin/chpass", should be 0, group is 80

Permissions differ on "usr/bin/chpass", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/bin/chpass" has been modified and will not be repaired

Group differs on "usr/bin/chsh", should be 0, group is 80

Permissions differ on "usr/bin/chsh", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/bin/chsh" has been modified and will not be repaired

Group differs on "usr/bin/newgrp", should be 0, group is 80

Permissions differ on "usr/bin/newgrp", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/bin/newgrp" has been modified and will not be repaired

Group differs on "usr/bin/passwd", should be 0, group is 80

Permissions differ on "usr/bin/passwd", should be -r-sr-xr-x , they are -rwsr-xr-x

Warning: SUID file "usr/bin/passwd" has been modified and will not be repaired

Warning: SUID file "Applications/Utilities/Activity Monitor.app/Contents/Resources/pmTool" has been modified and will not be repaired

Warning: SUID file "Applications/Utilities/Keychain Access.app/Contents/Resources/kcproxy" has been modified and will not be repaired

[imk]

Yes. I fixed all the group and permission issues, but I still get the "file has been modified" messages that pop up.

[vaporATX]

Yes. I fixed all the group and permission issues, but I still get the "file has been modified" messages that pop up.

 

How did you do your 10.5.3 update?

 

I fixed my permission issues by restoring my 10.5.2 backup and reapplying the 10.5.3 update using netkas' method. I'm pretty sure I didn't do anything different this time, but the permission issue went away. I now get a clean repair permissions when I run it. Strange.

[imk]

I used Mysticus C's combo update.

[vaporATX]

I used Mysticus C's combo update.

 

There's info in the thread on this updater on the OSX installation forum. Other folks are getting the permission errors with this updater. I tested it and the permission errors come back if I use this update method.

[Detosx]

There's info in the thread on this updater on the OSX installation forum. Other folks are getting the permission errors with this updater. I tested it and the permission errors come back if I use this update method.

I decided to bite the bullet and try Kalyway 10.5.2 again, having had usb problems the last time. This time I went with the vanilla kernel and found no usb mounting problems. Interesting. I then tried Jas 10.5.3 update. Mysticus C* knows his stuff and seems like a really nice guy but I couldn't get his suggestion to you to work for me, sounded like you got it working? I need to set up my hard drive like his but... I'm very attached to GUID since iATKOS embraced it. iATKOS has worked in so many cases for me where Kalyway and Leo4all have brought up a host of problems, but iATKOS is supposed to be a ragtag of differently dated files that...

 

Whatever the case, JaS gave me

 

Warning: SUID file "usr/sbin/scselect" has been modified and will not be repaired 'errors', if I can call them that.

 

but not

 

Group differs on "usr/bin/top", should be 0, group is 80

 

Anyone else finding this? Is there a solution? Also, I am unable to boot into the desktop with either Jas 10.5.3 or Kalyway 10.5.3 - Mysticus C*'s update I don't have that problem. Still haven't been able to get to the bottom of that. Anyone else having similar problems?

[RemcOSx]

I also had some SUID warnings when repairing permissions after the JaS 10.5.3 update:

 

http://img381.imageshack.us/img381/3054/picture1jn8.png

 

I sent a PM and this is his answer:

 

"the Suid and other errors are not a problem for the system it will run without issues caused by that. Also none of these issues will be happening in my 5.3 dvd. The 5.2 dvd was a beta and any injectors didn't work in 5.3."

 

So I made a backup of my data and wait for the 10.5.3 release of JaS!

[robi62]

Yes I got them as well but os still working fine

[vaporATX]

I decided to bite the bullet and try Kalyway 10.5.2 again, having had usb problems the last time. This time I went with the vanilla kernel and found no usb mounting problems. Interesting. I then tried Jas 10.5.3 update. Mysticus C* knows his stuff and seems like a really nice guy but I couldn't get his suggestion to you to work for me, sounded like you got it working?

 

Yes. I was getting the suid errors with any of the updaters (Jas, Kaly, or Mysticus). The way I got around it was to use Apple's combo updater using this method:

 

1) setup a watchdog that will remove AppleIntelCPUPowermanagement.kext

Open a terminal, become root (sudo -s), and type the command below:

# while sleep 1 ; do rm -rf /System/Library/Extensions/AppleIntelCPUPowerManagement.kext ; done

The command will not return a prompt. This is expected. Put this terminal window aside and continue to step 2.

 

2) open MacOSXUpdCombo10.5.3.dmg and start the update as normal. When it finishes, it will prompt you to restart. You need to do some things before you restart. If you restart before finishing the steps, your computer will not boot.

 

3) Go back to the terminal from step 1. Type Control-C (one key stroke), which will give you your root prompt back. Now you need to edit the file /System/InstallAtStartup/scripts/1. Use nano to open the file (nano /System/InstallAtStartup/scripts/1) , and find the string "Dont Steal Mac OS X.kext". Replace "Dont Steal Mac OS X.kext" with "dsmos.kext" (no quotes), and save the file.

 

Note: don't exit your root shell because you won't be able to get another root shell at this point. You also won't be able to run any programs that require root privileges. You'll have to do the rest of the steps manually from the root shell you opened in step 1

 

4)You now need to replace some kexts since the default Apple ones do not work for some people. In my case I have to replace 3 of them:

 

AppleAHCIPort.kext -- extracted from Mysticus' updater

IOAHCIFamily.kext -- same as above

AppleSMBIOS.kext -- used netkas latest

 

You may need to replace more. Kexts for you sound, networking, etc... you have to know what you need.

 

So, to replace them, do the following:

# cd /System/Library/Extensions

# cp -Rp /<location of the kexts>/<filename> (example: cp -Rp ~/Desktop/AppleAHCIPort.kext)

# diskutil repairPermissions /

# rm /System/Library/Extensions.mkext

# kextcache -k /System/Library/Extensions

 

 

5) now go back to the installer, and click the reboot button. When you get to the darwin bootloader pass -v to the boot loader for verbose info. The installer should cause your machine to reboot once before coming all the way to a login window. If it doesn't the -v, will allow you to see the MACH REBOOT message. If it doesn't automatically reboot reset the machine when you see MACH REBOOT.

 

6) The second reboot will allow you to login. You'll probably need to fix your video at this point. If you have nvidia you can use NVinstaller51 from Scott Dangel's site, or input the proper EFI strings.

 

7) Now repair permissions again and flush and update the cache.

# diskutil repairPermissions /

# rm /System/Library/Extensions.mkext

# kextcache -k /System/Library/Extensions

 

8) reboot your computer. It should come back with 10.5.3 running, full CI/QE, and no permission errors.

 

Good luck.

[ Mysticus C*]

hey guys i figured out how to fix the errors finally i made a small test package now i will soon add it to the final package as well so all the SUIDs at the end will be gone from now on

[robi62]

Thanks let us now when package is avalaibleI found your package installed it restarted fix permission all ok exceptthis oneJun 20 13:48:36 Robertos-mac Disk Utility[351]: Warning: SUID file "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/

[ Mysticus C*]

new update package is here...

http://forum.insanelymac.com/index.php?showtopic=109102

 

please read the info and guide (at the bottom of the post#1, which will be the most helpful thing if you learn to use it )

 

the update package is totally revised... so it is as original as possible with fixed/added stuffs to maintain stability...

 

if anyone finds any more suid errors? let me know... it is very easy to fix it it took me 3 days to figure it out...

 

(while running installer, with installer log, you may find 1-2 error scripts which is due to i think apple's misusage? bcoz those scripts missing some codes in them .. i didnt check it in apple's own installer but my guess is that those script errors exist in original update package as well... i will test it and report that... nothing major just annoying... error message during log but not to stop installer...)

[jnp]

Yes. I was getting the suid errors with any of the updaters (Jas, Kaly, or Mysticus). The way I got around it was to use Apple's combo updater using this method:

 

1) setup a watchdog that will remove AppleIntelCPUPowermanagement.kext

Open a terminal, become root (sudo -s), and type the command below:

# while sleep 1 ; do rm -rf /System/Library/Extensions/AppleIntelCPUPowerManagement.kext ; done

The command will not return a prompt. This is expected. Put this terminal window aside and continue to step 2.

 

2) open MacOSXUpdCombo10.5.3.dmg and start the update as normal. When it finishes, it will prompt you to restart. You need to do some things before you restart. If you restart before finishing the steps, your computer will not boot.

 

3) Go back to the terminal from step 1. Type Control-C (one key stroke), which will give you your root prompt back. Now you need to edit the file /System/InstallAtStartup/scripts/1. Use nano to open the file (nano /System/InstallAtStartup/scripts/1) , and find the string "Dont Steal Mac OS X.kext". Replace "Dont Steal Mac OS X.kext" with "dsmos.kext" (no quotes), and save the file.

 

 

Note: don't exit your root shell because you won't be able to get another root shell at this point. You also won't be able to run any programs that require root privileges. You'll have to do the rest of the steps manually from the root shell you opened in step 1

 

4)You now need to replace some kexts since the default Apple ones do not work for some people. In my case I have to replace 3 of them:

 

AppleAHCIPort.kext -- extracted from Mysticus' updater

IOAHCIFamily.kext -- same as above

AppleSMBIOS.kext -- used netkas latest

 

You may need to replace more. Kexts for you sound, networking, etc... you have to know what you need.

 

So, to replace them, do the following:

# cd /System/Library/Extensions

# cp -Rp /<location of the kexts>/<filename> (example: cp -Rp ~/Desktop/AppleAHCIPort.kext)

# diskutil repairPermissions /

# rm /System/Library/Extensions.mkext

# kextcache -k /System/Library/Extensions

 

 

5) now go back to the installer, and click the reboot button. When you get to the darwin bootloader pass -v to the boot loader for verbose info. The installer should cause your machine to reboot once before coming all the way to a login window. If it doesn't the -v, will allow you to see the MACH REBOOT message. If it doesn't automatically reboot reset the machine when you see MACH REBOOT.

 

6) The second reboot will allow you to login. You'll probably need to fix your video at this point. If you have nvidia you can use NVinstaller51 from Scott Dangel's site, or input the proper EFI strings.

 

7) Now repair permissions again and flush and update the cache.

# diskutil repairPermissions /

# rm /System/Library/Extensions.mkext

# kextcache -k /System/Library/Extensions

 

8) reboot your computer. It should come back with 10.5.3 running, full CI/QE, and no permission errors.

 

Good luck.

 

 

Guys, I need some help... prior to finding this thread, in the middle of my 10.5.3 update, I closed my original terminal window and now can't get back the sudo in order to edit the "1" script and restore my kexts. So basically I'm stuck right now at #3 in the steps listed above. Can anyone instruct me how to get back super user access? and/or how to recover from this point if I just go ahead and do the reboot?

[ Mysticus C*]

you may try the new update package?