Page 1 of 1

Permissions or sandbox issue in Catalina 10.15.6

Posted: Mon Jul 20, 2020 9:40 pm
by awado
After hours of searching and hacking around in terminal I am at loss. I downloaded the latest build of Sheepshaver, unzipped it, placed a valid ROM beside and no matter what I do, it hangs on double clicking. Obviously it seems to be an access problem, because when I start it from terminal with sudo, it works as expected. Log file says:

Code: Select all

Sandbox: SheepShaver(2636) System Policy: allow file-write-xattr /
Violation:       System Policy: allow file-write-xattr /
I also tested it on another Mac, also running Catalina. There it runs without sudo. I tried to figure out any differences, but had no success. Everything regarding permissions and ownership (including xattr) looks the same.

Any help appreciated. Maybe I overlooked something.

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Tue Jul 21, 2020 5:02 am
by Elyus
Not sure if it'll help with your problem, but whenever I test on Catalina, I always have to be careful to add the SheepShaver executable to System Preferences -> Privacy -> Full Disk Access.

Permissions are getting increasingly locked down in macOS, and at some point, the Mac builds of Sheep may need to adopt Apple's sandboxing rules for storing preferences and other items.

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Tue Jul 21, 2020 1:13 pm
by Ronald P. Regensburg
@ awado
Could there be a permissions issue with your Home folder? Do you (the user) have write permissions to the Home folder?

@ Elyus
It should not be needed to give SheepShaver Full Disk Access. Any specific properties of your builds that could make that necessary?

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Tue Jul 21, 2020 6:02 pm
by Elyus
Not that I'm aware of, but Mojave is still my daily driver. What I have done ever since testing with Catalina or Big Sur is set Full Disk Access and leave it that way after having any permission issues.

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Tue Jul 21, 2020 8:13 pm
by awado
Thanks for your answers. Home folder permissions are okay. I already tried Full Disk Access, but doesn't change anything. It was my first idea, too. On the second Mac access settings also where not set and it worked there. Must be something different. There's also no antivirus or application firewall software. I'm a Mac sysadmin, so I'm quite familiar with all this. What are the files Sheepshaver usually needs beside the ROM, .dsk and .iso files? Might it be something with SIP, which I have deactivated? So the elevation of permission runs differently? Is it the included etherhelpertoolm, which needs further permissions?

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Wed Jul 22, 2020 9:19 am
by Ronald P. Regensburg
SheepShaver can be launched with only the application itself and in the same folder a compatible ROM file that is (re)named "Mac OS ROM".

When you say that the app hangs on double clicking, exactly what do you see happening.? Is a window opened? Do get a beach ball?

Was a ~/.sheepshaver_prefs file created?

Note that you cannot launch SheepShaver from the location where the .zip archive is expanded. The app must first be moved or copied to the desired location. (A security feature that was introduced in macOS 10.12 Sierra.)

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Wed Jul 22, 2020 10:48 am
by awado
I get a beach ball. I did it exactly as you wrote. Made a folder on the desktop, moved the application in there and also ROM, dsk, iso. The prefs file was not created. Running it via sudo from there shows the vm instantly. Double clicking shows the beach ball.

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Wed Jul 22, 2020 2:20 pm
by Ronald P. Regensburg
Try:
- Make a copy of the app in a different location
- Delete the original
- Move the copy back to where the original was

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Wed Jul 22, 2020 4:35 pm
by awado
Still no success. :sad:

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Wed Jul 22, 2020 5:02 pm
by emendelson
Have you tried

Code: Select all

xattr -cr SheepShaver.app
??

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Wed Jul 22, 2020 5:28 pm
by awado
Yes. Tried "xattr -cr" and no success. But interesting observation:

I created another user "test" in Catalina and could successfully use Sheepshaver on its desktop. So I put this whole Sheepshaver folder from the desktop into the shared user folder. From the new test user I still can start it there successfully, which indicates that permissions should be okay. But this does not work from my current user, it also shows the beachball. So it must be some resource restriction of my current user?

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Wed Jul 22, 2020 5:44 pm
by Ronald P. Regensburg
Can you save a file to root level of your Home folder?

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Wed Jul 22, 2020 5:49 pm
by awado
Yes. Just saved a TextEdit file in my home folder.

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Wed Jul 22, 2020 7:20 pm
by Ronald P. Regensburg
I have no more ideas. What could possibly be special (probably unusual) about your user account?

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Thu Jul 23, 2020 8:30 am
by awado
Anyway, thank you for your help so far, though. Much appreciated. I'm not aware of anything that makes my account unique. Would Sheepshaver run in safe boot mode (pressing SHIFT at boot)?

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Thu Jul 23, 2020 10:22 am
by Ronald P. Regensburg
Here SheepShaver runs after a safe boot in Catalina, useable but with some display issues.

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Thu Jul 23, 2020 6:49 pm
by awado
Got it!!! And it's an interesting point: In the accessibility settings I had enabled reduced transparency. As soon as I untick that, Sheepshaver runs. I can reproduce this on my test account. So it seems to be related to graphics driver stuff. (I have a MacBook Pro with a Radeon Pro 450.)

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Thu Jul 23, 2020 7:25 pm
by Ronald P. Regensburg
Interesting. I have reduced transparency enabled and I do not have the issue with SheepShaver. There must be more involved. My Late 2013 iMac has a NVIDIA GeForce GT 750M 1 GB graphics card.

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Sun Jul 26, 2020 9:16 am
by kanjitalk755
This issue may be related to https://www.emaculation.com/forum/viewt ... 20&t=10392.
See the topic and try the new build.

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Sun Jul 26, 2020 11:08 am
by awado
Thanks for this update. Tried the new version. Unfortunately no change here. But I could nail it down a bit further: Beach ball only occurs with an external retina display (28" Samsung). On the internal display everything works fine, no matter which GPU is used, with and without transparencies. So I still guess it may be something with the graphics driver for my AMD Radeon Pro 450.

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Sun Jul 26, 2020 11:51 am
by kanjitalk755
Then try adding the following line to ~/.sheepshaver_prefs:

Code: Select all

sdlrender software
This option is valid only the new build.

Re: Permissions or sandbox issue in Catalina 10.15.6

Posted: Sun Jul 26, 2020 12:34 pm
by awado
Unfortunately no change. :-(

Well, I think I'm fine with transparency turned on now. So, if it's only me, who's having trouble here, don't worry. Don't want to arouse too many sheeps. But nevertheless, I'm happy to stay for testing, if you want to iron that out.