I noticed an error in the console that I wanted to stop showing up. It’s this one:
Failed to enter sandbox: /System/Library/Sandbox/Profiles/com.apple.touristd.sb:68:2: illegal argument: (allow iokit-open "RootDomainUserClient")
Note the last part.
(allow iokit-open "RootDomainUserClient")
That should read:
(allow iokit-open (iokit-user-client-class "RootDomainUserClient"))
I am rather surprised that nobody at Apple checked it.
Advertisements
https://carlashley.com/2016/10/19/com-apple-touristd/
indicates that this is associated with
~/Library/Preferences/com.apple.touristd.plist
and suggests a different correction, but how did you fix this error?
Hal Brown
Hi Hal,
That is only a preference for the tourist daemon. Let’s take a look at the LaunchAgent for it:
The result is:
Note the string for the program key. That is the actual daemon. The exact location of it – developers may have more tourist daemons on a volume. About how I modified it, and I should have mentioned it, but everything in /System is protected by Apple’s System Integrity Protection (SIP):
-> com.apple.rootless
In short. You need to disable SIP with:
Run that from your RecoveryHD and reboot. Don’t forget to re-enable SIP afterwards with:
. Or just ignore the error.
Aha. That makes a couple of things fall into place for me – thank you!
Hi there,
I’d like to ask your advice.
I’m running the High Sierra public beta and having frequent system freezes — the com.apple.touristd launch agent error precedes every reboot in my Console system.log.
Do you think it could be the cause of the system freezes?
Cheers,
Martin
Yeah. The touristd and trustd can cause lockups, but only temporarily. Should be fine after a while. Can you confirm that?