search

keybase / client

Keybase Go Library, Client, Service, OS X, iOS, Android, Electron
BSD 3-Clause "New" or "Revised" License
8.89k stars 1.23k forks source link

Lorri is not able to access a file in KBFS #23959

Open kalbasit opened 4 years ago

kalbasit commented 4 years ago

I have Lorri installed as a LaunchAgent in my user directory (i.e ~/Library/LaunchAgents/lorri.plist). I verified that Lorri is running as my user (same UID), but it somehow cannot access the same file that I can. Lorri is printing the following error: 

error: opening file /Volumes/Keybase/team/team-name/path/to/file: Operation not permitted.

This is working fine on Linux. The problem is present only on Darwin. I'm running Catalina 10.15.4.

my log id: 6b5153e646fb9d8e0d34b91c

strib commented 4 years ago

I'm not sure what Lorri is, but KBFS is only accessible to your own local macOS user for security reasons. So if Lorri is running as a different user (even root/admin), that's expected.

kalbasit commented 4 years ago

@strib it's running as my user.

strib commented 4 years ago

Hmm. Well I don't see the error in the log, which usually means that macOS itself returned the error to the program before it even came into KBFS. And that usually means the file system request came through a non-you user. It's possible Lorri itself farms something out to a different process or OS user (Finder does that sometime). If you can read the file yourself, then that's definitely what's happening. I'm sorry for the crapiness.

kalbasit commented 4 years ago

I'm not sure either how Lorri works.

CC some of the people who work on Lorri or may know what's going on here: @Profpatsch @grahamc @curiousleo and @LnL7