Page 1 of 1

How to create rule for Prey

Posted: Tue Mar 01, 2016 3:04 am
by fastasleep
How do I create a rule for Prey? I feel like I've had this working at some point but can't seem to make it work now.

The problem is the user 'prey' is getting blocked (the process is 'node' but it's the user that's red in the activity monitor), even though the rule is set to cover all users:

/usr/local/lib/prey/versions/1.5.0/bin/node
Allow any outgoing connection
Process Owner:  Anyone

I've tried every thing I can think of, and it's still being blocked. It's pointed at the correct/current version of Prey. preyproject.com's docs are out of date and of no help here.

Re: How to create rule for Prey

Posted: Wed Mar 02, 2016 7:49 am
by hagen
If you right-click on the red entry in Network Monitor and choose "Show Corresponding Rule", what does it show?

Re: How to create rule for Prey

Posted: Thu Mar 03, 2016 2:49 am
by fastasleep
hagen wrote:If you right-click on the red entry in Network Monitor and choose "Show Corresponding Rule", what does it show?


Oh yeah, that's another thing — it just has an option to Delete From List and none of the options that the others in the list have.

Re: How to create rule for Prey

Posted: Thu Mar 03, 2016 9:06 am
by hagen
On the Prey website there's this paragraph:

After installing the software on your laptop, tablet or phone, Prey will sleep silently in the background awaiting your command. Once remotely triggered from your Prey account, your device will gather and deliver detailed evidence back to you, including a picture of who's using it – often the crucial piece of data that police officers need to take action.

That suggests that Prey needs inbound as well as outbound permissions, and the "command" will have to pass through the built-in firewall before LS sees it.

If it's to work while the "stolen" laptop is at the login screen, the rules need to be global which they will be if owner is "anyone".

I hope that helps. Beyond what's on the website, I know nothing.

Re: How to create rule for Prey

Posted: Thu Mar 03, 2016 9:43 am
by fastasleep
I don't think that has anything to do with my issue. LS is blocking outbound connections over https... and actually looking now, in the last 7 hours it's had 5 successful connects and 1190 of them blocked. So not sure why that might be.

The details window says

node
Information Hidden

Process
Where: /usr/local/lib/prey/versions/1.5.0/bin
User: prey

Server
Information Hidden

Connection Statistics
TCP Port: https (443)
(etc)

Re: How to create rule for Prey

Posted: Sat Mar 05, 2016 1:13 am
by fastasleep
Got an answer from support that worked:

Do this in Terminal:
sudo -u prey /Applications/Little\ Snitch\ Configuration.app/Contents/MacOS/Little\ Snitch\ Configuration

After typing your admin password, you should be able to see the Little Snitch Configuration window with the rules for '/usr/lib/prey/versions/…/bin/node' from the user 'prey' and you could set them to your needs.

the prey user is no longer red. :)

Re: How to create rule for Prey

Posted: Fri Apr 22, 2016 7:22 pm
by drewaharris
I tried this terminal fix and received the following:

Code: Select all

2016-04-22 13:04:29.524 Little Snitch Configuration[1687:166021] CFPasteboardRef CFPasteboardCreate(CFAllocatorRef, CFStringRef) : failed to create global data
2016-04-22 13:04:29.524 Little Snitch Configuration[1687:166021] CFPasteboardRef CFPasteboardCreate(CFAllocatorRef, CFStringRef) : failed to create global data
2016-04-22 13:04:29.524 Little Snitch Configuration[1687:166021] CFPasteboardRef CFPasteboardCreate(CFAllocatorRef, CFStringRef) : failed to create global data
2016-04-22 13:04:29.525 Little Snitch Configuration[1687:166021] CFPasteboardRef CFPasteboardCreate(CFAllocatorRef, CFStringRef) : failed to create global data
2016-04-22 13:04:29.863 Little Snitch Configuration[1687:166021] Failed to obtain sandbox extension for path=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration. Errno:2
2016-04-22 13:04:29.864 Little Snitch Configuration[1687:166021] Failed to obtain sandbox extension for path=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration. Errno:2
2016-04-22 13:04:44.911 Little Snitch Configuration[1687:166260] Persistent UI failed to open file file:///var/empty/Library/Saved%20Application%20State/at.obdev.LittleSnitchConfiguration.savedState/window_1.data: No such file or directory (2)


Little Snitch launches but I still can't figure out how to get it to accept Prey connection. It still shows as red in the network monitor.

Suggestions??

Thanks!
Drew

Re: How to create rule for Prey

Posted: Sun Apr 24, 2016 1:32 am
by fastasleep
Not sure what's happening there, but looks like something is wrong with your install. Try reinstalling first, reboot, and try the Terminal command again. All it is doing is launching the app as the user 'prey' which then lets you edit the rules for that user properly.

Re: How to create rule for Prey

Posted: Thu Jul 14, 2016 2:23 pm
by Forrest
Straight from Little Snitch tech support:

Prey is somehow tricky, because it installs itself as a new user on the system (user: 'prey') which is a quite unusual and radical approach, but it seems to be necessary for its functionality.

The rules for Little Snitch are in fact distinguished by the owner and rules in Little Snitch can have 3 different kinds of process owners:

- The current user 'Me' for all processes running for the current user
- 'System' for all system processes running as 'root' or other system-users
- All users resp. 'Anyone' - such rules are valid for ever user on the system.

(You can edit your own rules so they are valid for all users from within your user accounts Little Snitch Configuration, which would require to check 'Little Snitch Preferences > Security > Allow Global Rule Editing')


Anyway that's why you possibly do not see all rules from within your user account for these connections from 'node' but instead they are registered for the user 'prey'.

One possible way to access the rules for user 'prey' would be to open the Little Snitch Configuration as the user 'prey' via the following Terminal command (/Applications/Utilities/Terminal.app):

sudo -u prey /Applications/Little\ Snitch\ Configuration.app/Contents/MacOS/Little\ Snitch\ Configuration

After typing your admin password, you should be able to see the Little Snitch Configuration window with the rules for '/usr/lib/prey/versions/…/bin/node' from the user 'prey' and you could set them to your needs.

I'm not very familiar with Prey, but it seems that the 'node' process requires several connections to control.preyproject.com, amazonaws and some DNS servers and local link addresses.

Some connections from Prey are made as root, some as your active user account and some exclusive as the 'prey' user.

For example you could copy these rules from the 'prey' user LSC and paste them into any text editor, edit them to 'owner: any' and from there copy and paste the rules into your users LSC window.

Re: How to create rule for Prey

Posted: Thu Jul 14, 2016 2:27 pm
by Forrest
When trying the sudo command I get an error:

>>> /etc/sudoers: syntax error near line 47 <<<
sudo: parse error in /etc/sudoers near line 47
sudo: no valid sudoers sources found, quitting

Re: How to create rule for Prey

Posted: Fri Jul 15, 2016 12:14 am
by fastasleep
Hmm, your sudoers file must be messed up. That's not good. I'm not sure how to edit it without using sudo, either. :) You may want to reinstall OS X.

Re: How to create rule for Prey

Posted: Tue Feb 12, 2019 6:53 pm
by maxplanar
I tried using the above command to run LS as user prey, but got this back (running Mojave 10.14.3):

>>>>>>>>>>>>>BEGIN>>>>>>>>>>>>>>>>>>>>
:$ sudo -u prey /Applications/Little\ Snitch\ Configuration.app/Contents/MacOS/Little\ Snitch\ Configuration
2019-02-12 08:46:12.199 Little Snitch Configuration[5104:987976] +[NSXPCSharedListener endpointForReply:withListenerName:]: an error occurred while attempting to obtain endpoint for listener 'ClientCallsAuxiliary': Connection interrupted
2019-02-12 08:46:12.244 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “OfflineWebApplicationCache” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache, NSUnderlyingError=0x7fb3a5c74340 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.244 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “WebSQL” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL, NSUnderlyingError=0x7fb3a5502fc0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.245 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “MediaKeys” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys, NSUnderlyingError=0x7fb3a6046c90 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.245 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “IndexedDB” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB, NSUnderlyingError=0x7fb3a1fa25c0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.247 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/NetworkCache" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “NetworkCache” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/NetworkCache, NSUnderlyingError=0x7fb3a55a4e90 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.249 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “OfflineWebApplicationCache” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache, NSUnderlyingError=0x7fb3a5c0e930 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.249 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “MediaKeys” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys, NSUnderlyingError=0x7fb3a5e50010 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.249 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “WebSQL” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL, NSUnderlyingError=0x7fb3a5e33f90 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.249 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “IndexedDB” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB, NSUnderlyingError=0x7fb3a5d0e880 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.250 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/ResourceLoadStatistics" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “ResourceLoadStatistics” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/ResourceLoadStatistics, NSUnderlyingError=0x7fb3a5c1d560 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.250 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/ServiceWorkers" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “ServiceWorkers” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/ServiceWorkers, NSUnderlyingError=0x7fb3a5e49f40 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.264 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “OfflineWebApplicationCache” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache, NSUnderlyingError=0x7fb3a50b6ee0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.264 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “WebSQL” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL, NSUnderlyingError=0x7fb3a53313c0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.264 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “MediaKeys” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys, NSUnderlyingError=0x7fb3a50d3450 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.264 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “IndexedDB” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB, NSUnderlyingError=0x7fb3a51bd8c0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.265 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/NetworkCache" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “NetworkCache” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/NetworkCache, NSUnderlyingError=0x7fb3a606bca0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.271 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “OfflineWebApplicationCache” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache, NSUnderlyingError=0x7fb3a52f9aa0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.271 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “WebSQL” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL, NSUnderlyingError=0x7fb3a52ec910 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.271 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “MediaKeys” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys, NSUnderlyingError=0x7fb3a52e9730 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.271 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “IndexedDB” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB, NSUnderlyingError=0x7fb3a52e03f0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.272 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/NetworkCache" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “NetworkCache” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/NetworkCache, NSUnderlyingError=0x7fb3a58669b0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.277 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “OfflineWebApplicationCache” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache, NSUnderlyingError=0x7fb3a5e36970 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.277 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “WebSQL” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL, NSUnderlyingError=0x7fb3a5e36a00 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.278 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “MediaKeys” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys, NSUnderlyingError=0x7fb3a5e36910 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.278 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “IndexedDB” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB, NSUnderlyingError=0x7fb3a5ddaef0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.279 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/NetworkCache" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “NetworkCache” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/NetworkCache, NSUnderlyingError=0x7fb3a5e3a720 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.284 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “OfflineWebApplicationCache” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache, NSUnderlyingError=0x7fb3a55e22a0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.284 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “WebSQL” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL, NSUnderlyingError=0x7fb3a5e542f0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.284 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “MediaKeys” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys, NSUnderlyingError=0x7fb3a55e2450 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.285 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “IndexedDB” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB, NSUnderlyingError=0x7fb3a58184b0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.286 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/NetworkCache" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “NetworkCache” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/NetworkCache, NSUnderlyingError=0x7fb3a520c0b0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.290 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “OfflineWebApplicationCache” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache, NSUnderlyingError=0x7fb3a58b0850 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.291 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “WebSQL” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL, NSUnderlyingError=0x7fb3a58b0920 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.291 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “MediaKeys” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys, NSUnderlyingError=0x7fb3a58b07f0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.291 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “IndexedDB” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB, NSUnderlyingError=0x7fb3a58b0a90 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.292 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/NetworkCache" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “NetworkCache” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/NetworkCache, NSUnderlyingError=0x7fb3a5e55680 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.303 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “OfflineWebApplicationCache” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/OfflineWebApplicationCache, NSUnderlyingError=0x7fb3a52b6e90 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.303 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “WebSQL” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/WebSQL, NSUnderlyingError=0x7fb3a52d8280 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.303 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “MediaKeys” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/MediaKeys, NSUnderlyingError=0x7fb3a5180690 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.304 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “IndexedDB” in the folder “WebsiteData”." UserInfo={NSFilePath=/var/empty/Library/WebKit/at.obdev.LittleSnitchConfiguration/WebsiteData/IndexedDB, NSUnderlyingError=0x7fb3a50cf640 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2019-02-12 08:46:12.305 Little Snitch Configuration[5104:987974] could not create directory "/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/NetworkCache" for future sandbox extension, error Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “NetworkCache” in the folder “WebKit”." UserInfo={NSFilePath=/var/empty/Library/Caches/at.obdev.LittleSnitchConfiguration/WebKit/NetworkCache, NSUnderlyingError=0x7fb3a55e1350 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
<<<<<<<<<<<<<<END<<<<<<<<<<<<<<<

Something clearly wrong - how can I get around this?

Re: How to create rule for Prey

Posted: Wed Feb 13, 2019 5:25 am
by fastasleep
I don't think it's necessary anymore. I just upgraded to a new Mac and decided to start with an entirely new account and manually set up everything, and did not run into this issue this time around, Prey is working fine with LS. Either Mojave or Prey or both fixed the issue I think?