Error in com.apple.touristd.sb

I noticed an error in the console that I wanted to stop showing up. It’s this one:

Failed to enter sandbox: /System/Library/Sandbox/Profiles/com.apple.touristd.sb:68:2: illegal argument: (allow iokit-open "RootDomainUserClient")

Note the last part.

(allow iokit-open "RootDomainUserClient")

That should read:

(allow iokit-open (iokit-user-client-class "RootDomainUserClient"))

I am rather surprised that nobody at Apple checked it.

8 thoughts on “Error in com.apple.touristd.sb”

https://carlashley.com/2016/10/19/com-apple-touristd/

indicates that this is associated with

~/Library/Preferences/com.apple.touristd.plist

and suggests a different correction, but how did you fix this error?

Hal Brown

Hi Hal,

That is only a preference for the tourist daemon. Let’s take a look at the LaunchAgent for it:

cat /System/Library/LaunchAgents/com.apple.touristd.plist

The result is:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Label</key>
	<string>com.apple.touristd</string>
	<key>Program</key>
	<string>/System/Library/PrivateFrameworks/Tourist.framework/Versions/A/Resources/touristd</string>
	<key>POSIXSpawnType</key>
	<string>Adaptive</string>
	<key>EnablePressuredExit</key>
	<true/>
	<key>EnableTransactions</key>
	<true/>
	<key>LaunchEvents</key>
	<dict>
		<key>com.apple.xpc.activity</key>
		<dict>
			<key>com.apple.tourist.notify</key>
			<dict>
				<key>Delay</key>
				<string>0</string>
				<key>Priority</key>
				<string>Utility</string>
				<key>Repeating</key>
				<false/>
				<key>GracePeriod</key>
				<integer>30</integer>
				<key>Interval</key>
				<integer>60</integer>
			</dict>
		</dict>
	</dict>
</dict>
</plist>

Note the string for the program key. That is the actual daemon. The exact location of it – developers may have more tourist daemons on a volume. About how I modified it, and I should have mentioned it, but everything in /System is protected by Apple’s System Integrity Protection (SIP):

xattr /System

-> com.apple.rootless
In short. You need to disable SIP with:

csrutil disable

Run that from your RecoveryHD and reboot. Don’t forget to re-enable SIP afterwards with:

csrutil enable

. Or just ignore the error.

Aha. That makes a couple of things fall into place for me – thank you!

Hi there,

I’d like to ask your advice.

I’m running the High Sierra public beta and having frequent system freezes — the com.apple.touristd launch agent error precedes every reboot in my Console system.log.

Do you think it could be the cause of the system freezes?

Cheers,

Martin

pikeralpha | July 9, 2017 at 5:01 pm

Yeah. The touristd and trustd can cause lockups, but only temporarily. Should be fine after a while. Can you confirm that?

Reply
- Théo | July 28, 2017 at 3:30 pm
  
  Hi,
  
  I’m running the latest version of macOS High Sierra Public Beta (build : 17A315i), and touristd is always wasting all my bandwidth ! In the Activity Monitor, the touristd daemon downloads about 3mb of data, then quits, then launches again, downloads 3mb again… again and again ! And when I click “forcequit”, the daemon launches again.
  
  Is there a way to fix that issue (even if it’s a beta) ?
  
  Théo.
- Reüel | August 4, 2017 at 9:27 pm
  
  Théo, same issue here. I just moved the `com.apple.touristd.plist` file out of the LaunchAgents directory to stop loading the launch agent.
  
  – Boot in Recovery mode (hold Cmd + R)
  – Open Terminal from the menu
  – Disable SIP (System Integrity Protection): `csrutil disable`
  – Create a new directory: `mkdir /System/Library/LaunchAgents-Disabled`
  – Move the com.apple.touristd.plist: `mv /System/Library/LaunchAgents/com.apple.touristd.plist /System/Library/LaunchAgents-Disabled/com.apple.touristd.plist`
  – Enable SIP: `csrutil enable`
  – Reboot: `reboot`