For /var/log/system.log
full of errors like these ones:
kernel[0]: Sandbox: com.apple.Addres(XXXXX) deny(1) network-outbound /private/var/run/mDNSResponder
com.apple.AddressBook.InternetAccountsBridge[XXXXX]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1
com.apple.AddressBook.InternetAccountsBridge[XXXXX]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted
How to fix it?
Require SIP disabled and root access:
- update
/System/Library/Sandbox/Profiles/application.sb
(see below) - delete
/Users/mems/Library/Containers/com.apple.AddressBook.InternetAccountsBridge
(will be regenerated based on the updated sandbox profile) - kill all processes named
com.apple.AddressBook.InternetAccountsBridge
- restart
Contact.app
orMail.app
To update application.sb
:
(unless
(or (entitlement "com.apple.security.network.client")
(entitlement "com.apple.security.network.server")
(entitlement "com.apple.security.print"))
(deny network-outbound (literal "/private/var/run/mDNSResponder")))
to
(unless
(or (entitlement "com.apple.security.network.client")
(entitlement "com.apple.security.network.server")
(entitlement "com.apple.security.print")
(equal? (param "application_bundle_id") "com.apple.AddressBook.InternetAccountsBridge"))
(deny network-outbound (literal "/private/var/run/mDNSResponder")))
Contact.app
will still a bit unresponsive (spinning beach ball) when edit some contacts, but errors will stopped.
More about App Sandbox in OSX:
/System/Library/Sandbox/Profiles/application.sb
- About App Sandbox
- Mac OS® X and iOS Internals - Mac OS X and iOS Internals.pdf
- Apple Sandbox Guide v1.0 - Apple-Sandbox-Guide-v1.0.pdf
- MacOsX Sandbox for Transmission
- https://github.com/hellais/Buckle-Up
Refernces:
@mems - this has removed the error as you suggested it might, however when I attempt to open my slack client (which I installed via Homebrew) it fails to open generating the following exception and trace. Have you seen anything similar with any other applications installed with or without homebrew? It seems to be referencing the lines I changed per this gist. I'd hate to give up the performance gain I got and I can use the web client but I'd like to root cause this and am happy to provide any other info if you need it to assist me in the endeavor.