Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Davide Alessio

macrumors newbie
Original poster
Jun 27, 2020
5
0
installed big sur on a mac 16'

I have a problem on access (copy, change permissions)
on system dir

also with crsutil disable on

also problem on mount

sudo mount -uw /
Password:
mount_apfs: volume could not be mounted: Permission denied
mount: / failed with 66

it is a bug?
is there a solution?
 

chrfr

macrumors G5
Jul 11, 2009
13,702
7,264
installed big sur on a mac 16'

I have a problem on access (copy, change permissions)
on system dir

also with crsutil disable on

also problem on mount

sudo mount -uw /
Password:
mount_apfs: volume could not be mounted: Permission denied
mount: / failed with 66

it is a bug?
is there a solution?
It’s not a bug. You’ll want to read this to understand the changes to the now signed system volume. https://eclecticlight.co/2020/06/25/big-surs-signed-system-volume-added-security-protection/
 

Davide Alessio

macrumors newbie
Original poster
Jun 27, 2020
5
0
sorry but my english is not high level and I don't want to make something wrong...
can someone write me what I have to do with simple words?
 

chrfr

macrumors G5
Jul 11, 2009
13,702
7,264
sorry but my english is not high level and I don't want to make something wrong...
can someone write me what I have to do with simple words?
It’d be more productive for you to explain what you’re trying to do. Why are you trying to write to the System volume?
 

DeltaMac

macrumors G5
Jul 30, 2003
13,749
4,572
Delaware
I think you will get to wait for Xtrafinder updates, or at least watch the site for news about support for Big Sur.
I see on their site that Xtrafinder on Catalina later than version 10.15.4 does not work unless SIP is disabled.
The extra security protection in Big Sur (the Signed Security Volume (SSV) probably means that Xtrafinder will need an update (which their Facebook page says "no solution yet" for latest versions of Catalina, let alone Big Sur's SSV)
Xtrafinder Facebook page

Or contact Xtrafinder directly.
 

Davide Alessio

macrumors newbie
Original poster
Jun 27, 2020
5
0
uhmm why to wait if I have only to install on home folder as chabig say?
[automerge]1593301535[/automerge]
I think you will get to wait for Xtrafinder updates, or at least watch the site for news about support for Big Sur.
I see on their site that Xtrafinder on Catalina later than version 10.15.4 does not work unless SIP is disabled.
The extra security protection in Big Sur (the Signed Security Volume (SSV) probably means that Xtrafinder will need an update (which their Facebook page says "no solution yet" for latest versions of Catalina, let alone Big Sur's SSV)

Or contact Xtrafinder directly.
it worked until yesterday, with 10.15.5
 

Sarassine

macrumors member
Jun 6, 2019
65
25
sorry but my english is not high level and I don't want to make something wrong...
can someone write me what I have to do with simple words?



About Signed System Volume
Excerpt from an Apple article:

In macOS Catalina, Apple introduced the read-only system volume, which is a dedicated, isolated volume for system content. Now, macOS Big Sur adds strong cryptographic protections to store system content on a signed system volume (SSV). SSV features a kernel mechanism that verifies the integrity of the system content at runtime, and rejects any data — code and non-code — that doesn’t have a valid cryptographic signature from Apple.

SSV helps prevent tampering with any Apple software that is part of the operating system. Additionally, it makes macOS Software Update more reliable and much safer. SSV utilizes APFS snapshots, so if an update cannot be performed, the old system version can be restored without reinstallation.

More notably:

Signed system volume is transparent for most developers. Kernel developers who must interact with the root volume can do so via a new System Integrity Protection mode available in the csrutil command line tool. When you enable this mode, it allows the tagging of custom snapshots using apfs_systemsnapshot, which you can then boot into.

Bypassing SSV
So the way macOS Big Sur is supposed to boot is that it never boots off the live volume, but a snapshot of it (its not happening on all systems though). Naturally, it is impossible to mount a "snapshot" as writable. So what can be done is as follows:

In recovery Terminal:
csrutil authenticated-root disable
As of Beta 1, FileVault needs to be disabled to turn off ART.

Back in normal boot, mount the live volume as writable. This is possible as on Catalina:
diskutil mount disk1s5 # Use your live volume's disk identifier.
sudo mount -uw /Volumes/Macintosh\ HD\ 1 # Use your live volume's name.
Make modifications to the live volume.
Generate and tag new APFS System Snapshot as follows:
# Create snapshot.
sudo /System/Library/Filesystem/apfs.fs/Contents/Resources/apfs_systemsnapshot -s "SnapshotName" -v /Volumes/Macintosh\ HD\ 1

# Tag snapshot for next boot.
sudo /System/Library/Filesystem/apfs.fs/Contents/Resources/apfs_systemsnapshot -r "SnapshotName" -v /Volumes/Macintosh\ HD\ 1
Reboot and voila!
 

Killa Aaron

macrumors 6502
Nov 14, 2011
306
244
Chicago
This is horrible, I've always used custom dock icons and this new feature kills that freedom now, might have to downgrade to Catalina cause the new icons are Fugly.
 
  • Like
Reactions: h9826790

Stefdar

macrumors regular
Feb 4, 2012
139
163
This will only work if you never activate encrypted signing or filevault again, so it's definitely not worth it.
 
  • Like
Reactions: Sarassine
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.