boot drive

101805

Registered
What should I have as permissions on the (internal) boot drive of a MacPro running OS10.6.7 ?
If they are not what they should be how could I correct them, There are two admin users on the machine and one standard user. All are 'me'.
Currently the 501 user is Read Write: Staff is Read Write: Everyone is Read Only.
There are two admins and even when logged in to the second one permissions appear as above. I realise that second admin comes under 'Staff'
Do you see any problems fom the permissions as stated?
 
I don't see any problems at all, and I would highly suggest NEVER adjusting the permissions of the boot drive itself, lest you render your machine unbootable.

To fix permissions, simply launch Disk Utility, highlight your boot drive, then click "Repair Permissions." Nothing more needs to be done.
 
Diablo, thanks for response. I can say that I have found no material problems with the boot drive so configured. I did have advice elsewhere that the granting of permissions to 'staff' could potentially allow access by malware and otherwise cause failures.
Further the stated permissions are not as they are on a Powerbook running 10.5.7 I have. I have failed to find anything in Apple's knowledge base that specifically addresses the issue. I have seen posts on the Apple forum in the past, from people who had problems accessing their boot drives but I cannot recall their location or find them on search. The usual response to said posts was to use a "chmod" command to set permissions 'correctly'. I can't find the appropriate command.
You mention using 'disk utility'. I tried it. logged in as my usual non admin, as the 501 user and as 'root'. The boot drive access permissions remained the same, that is with write access for 'staff', for the 501 and not for the reserve admin, though of course that user gets write access as 'staff'. The only other way to access permissions would be in Single User mode on a mounted file system but that requires a command line.
I changed permissions only to allow a specific user write access when I found that was required to add a custom icon for the drive. I made point of immediately changing the permissions back and only by chance found them, much later, to be as I quoted, that combination was never set by me.
 
Back
Top