[OpenAFS-port-darwin] El Capitan

[Daria Brashear]

--089e0115fc9eb4e551051d966941
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

/usr/local is writable, and appears to be where they would like you to
migrate. It is what is being used in future installers.

On Tue, Aug 18, 2015 at 10:04 AM, Teddy Thomas <tthoma24@mit.edu> wrote:

> The issue is that Apple has introduced a new security feature called
> System Integrity Protection (aka =E2=80=9CRootless=E2=80=9D) in 10.11. It=
 is supposed to
> prevent unauthorized modifications of system files, which is why /usr is =
no
> longer writable, even as root. (I believe /usr/local is still okay, but I=
=E2=80=99m
> a bit fuzzy on that). If anyone is curious, they might want to read more
> here:
> https://developer.apple.com/library/prerelease/mac/releasenotes/MacOSX/Wh=
atsNewInOSX/Articles/MacOSX10_11.html#//apple_ref/doc/uid/TP40016227-DontLi=
nkElementID_17
> and here: https://en.wikipedia.org/wiki/System_Integrity_Protection
>
> While we=E2=80=99re waiting for the YFS installer, I managed to get AFS w=
orking
> with the YFS installer by disabling System Integrity Protection (aka
> =E2=80=9CRootless) by booting into Recovery and choosing the Security Con=
figuration
> utility. You might need a firmware update in order to do so; before I did
> the Firmware Update, I got a weird IOKit error when trying to change the
> setting.
>
> -Teddy
>
>
> On Aug 18, 2015, at 9:56 AM, Daria Brashear <shadow@gmail.com> wrote:
>
> The OpenAFS installers since time immemorial install into /usr; in 10.11,
> /usr is not writable.
>
> The installers YFS produces have been modified to be ready for 10.11 but
> as it is not released finally yet, we
> are not yet distributing one for it.
>
>
>
> On Tue, Aug 18, 2015 at 8:28 AM, Christer Grafstr=C3=B6m <
> christer.grafstrom@ltu.se> wrote:
>
>> Hello
>>
>> I have upgraded to El Capitan on my test-mac and openafs stopped working=
.
>> I have tried to install it but no luck.
>> The kext file is loaded so thats fine, but when i try to install the pkg
>> I hade on my  Mac OS X 10.10 the installation failed.
>>
>> This I have from system.log : sandboxd[123] ([1732]): shove(1732) System
>> Policy: deny file-write-create /usr/bin/aklog
>> This I can understand and I can recompile and move aklog to another file
>> path.
>>
>> Has someone else tried this and managed to install openafs on El Capitan=
?
>>
>> Regards
>> Christer Grafstrom
>> IT-Service
>> Lulea University of Technology
>>
>>
>>
>
>
> --
> Daria Phoebe Brashear
> Your File System, Inc.
>
>
>


--=20
D

--089e0115fc9eb4e551051d966941
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">/usr/local is writable, and appears to be where they would=
 like you to migrate. It is what is being used in future installers.<br></d=
iv><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Tue, Aug 18=
, 2015 at 10:04 AM, Teddy Thomas <span dir=3D"ltr">&lt;<a href=3D"mailto:tt=
homa24@mit.edu" target=3D"_blank">tthoma24@mit.edu</a>&gt;</span> wrote:<br=
><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1=
px #ccc solid;padding-left:1ex"><div style=3D"word-wrap:break-word">The iss=
ue is that Apple has introduced a new security feature called System Integr=
ity Protection (aka =E2=80=9CRootless=E2=80=9D) in 10.11. It is supposed to=
 prevent unauthorized modifications of system files, which is why /usr is n=
o longer writable, even as root. (I believe /usr/local is still okay, but I=
=E2=80=99m a bit fuzzy on that). If anyone is curious, they might want to r=
ead more here:=C2=A0<a href=3D"https://developer.apple.com/library/prerelea=
se/mac/releasenotes/MacOSX/WhatsNewInOSX/Articles/MacOSX10_11.html#//apple_=
ref/doc/uid/TP40016227-DontLinkElementID_17" target=3D"_blank">https://deve=
loper.apple.com/library/prerelease/mac/releasenotes/MacOSX/WhatsNewInOSX/Ar=
ticles/MacOSX10_11.html#//apple_ref/doc/uid/TP40016227-DontLinkElementID_17=
</a><div>and here:=C2=A0<a href=3D"https://en.wikipedia.org/wiki/System_Int=
egrity_Protection" target=3D"_blank">https://en.wikipedia.org/wiki/System_I=
ntegrity_Protection</a><br><div><br></div><div>While we=E2=80=99re waiting =
for the YFS installer, I managed to get AFS working with the YFS installer =
by disabling System Integrity Protection (aka =E2=80=9CRootless) by booting=
 into Recovery and choosing the Security Configuration utility. You might n=
eed a firmware update in order to do so; before I did the Firmware Update, =
I got a weird IOKit error when trying to change the setting.</div><span cla=
ss=3D"HOEnZb"><font color=3D"#888888"><div><br></div><div>-Teddy</div></fon=
t></span><div><div class=3D"h5"><div><br></div><div><br><div><blockquote ty=
pe=3D"cite"><div>On Aug 18, 2015, at 9:56 AM, Daria Brashear &lt;<a href=3D=
"mailto:shadow@gmail.com" target=3D"_blank">shadow@gmail.com</a>&gt; wrote:=
</div><br><div><div dir=3D"ltr"><div><div>The OpenAFS installers since time=
 immemorial install into /usr; in 10.11, /usr is not writable.<br><br></div=
>The installers YFS produces have been modified to be ready for 10.11 but a=
s it is not released finally yet, we<br></div>are not yet distributing one =
for it.<br><br><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quote=
">On Tue, Aug 18, 2015 at 8:28 AM, Christer Grafstr=C3=B6m <span dir=3D"ltr=
">&lt;<a href=3D"mailto:christer.grafstrom@ltu.se" target=3D"_blank">christ=
er.grafstrom@ltu.se</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quo=
te" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"=
>



<div style=3D"word-wrap:break-word">
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
Hello=C2=A0</div>
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
<br>
</div>
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
I have upgraded to El Capitan on my test-mac and openafs stopped working. I=
 have tried to install it but no luck.</div>
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
The kext file is loaded so thats fine, but when i try to install the pkg I =
hade on my =C2=A0Mac OS X 10.10 the installation failed.</div>
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
<br>
</div>
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
This I have from system.log :=C2=A0<span style=3D"font-family:Menlo;font-si=
ze:11px">sandboxd[123] ([1732]): shove(1732) System Policy: deny file-write=
-create /usr/bin/aklog</span>=C2=A0</div>
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
This I can understand and I can recompile and move aklog to another file pa=
th.</div>
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
<br>
</div>
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
Has someone else tried this and managed to install openafs on El Capitan?</=
div>
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
<br>
</div>
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
Regards</div>
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
Christer Grafstrom</div>
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
IT-Service</div>
<div><span style=3D"line-height:16px;text-align:center">Lulea University of=
 Technology</span></div>
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
<br>
</div>
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
<br>
</div>
<div style=3D"font-size:14px;font-family:Calibri,sans-serif">
<div></div>
</div>
</div>

</blockquote></div><br><br clear=3D"all"><br>-- <br><div><div dir=3D"ltr">D=
aria Phoebe Brashear<br></div><div>Your File System, Inc.<br></div></div>
</div></div>
</div></blockquote></div><br></div></div></div></div></div></blockquote></d=
iv><br><br clear=3D"all"><br>-- <br><div class=3D"gmail_signature"><div dir=
=3D"ltr">D</div></div>
</div>

--089e0115fc9eb4e551051d966941--