Error in

I noticed an error in the console that I wanted to stop showing up. It’s this one:

Failed to enter sandbox: /System/Library/Sandbox/Profiles/ illegal argument: (allow iokit-open "RootDomainUserClient")

Note the last part.

(allow iokit-open "RootDomainUserClient")

That should read:

(allow iokit-open (iokit-user-client-class "RootDomainUserClient"))

I am rather surprised that nobody at Apple checked it.

8 thoughts on “Error in

    • Hi Hal,

      That is only a preference for the tourist daemon. Let’s take a look at the LaunchAgent for it:

      cat /System/Library/LaunchAgents/

      The result is:

      <?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "">
      <plist version="1.0">

      Note the string for the program key. That is the actual daemon. The exact location of it – developers may have more tourist daemons on a volume. About how I modified it, and I should have mentioned it, but everything in /System is protected by Apple’s System Integrity Protection (SIP):

      xattr /System

      In short. You need to disable SIP with:

      csrutil disable

      Run that from your RecoveryHD and reboot. Don’t forget to re-enable SIP afterwards with:

      csrutil enable

      . Or just ignore the error.

  1. Hi there,

    I’d like to ask your advice.

    I’m running the High Sierra public beta and having frequent system freezes — the launch agent error precedes every reboot in my Console system.log.

    Do you think it could be the cause of the system freezes?



      • Hi,

        I’m running the latest version of macOS High Sierra Public Beta (build : 17A315i), and touristd is always wasting all my bandwidth ! In the Activity Monitor, the touristd daemon downloads about 3mb of data, then quits, then launches again, downloads 3mb again… again and again ! And when I click “forcequit”, the daemon launches again.

        Is there a way to fix that issue (even if it’s a beta) ?


      • Théo, same issue here. I just moved the `` file out of the LaunchAgents directory to stop loading the launch agent.

        – Boot in Recovery mode (hold Cmd + R)
        – Open Terminal from the menu
        – Disable SIP (System Integrity Protection): `csrutil disable`
        – Create a new directory: `mkdir /System/Library/LaunchAgents-Disabled`
        – Move the `mv /System/Library/LaunchAgents/ /System/Library/LaunchAgents-Disabled/`
        – Enable SIP: `csrutil enable`
        – Reboot: `reboot`

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s