Unix "ln -s" command not permitted in OSX El Capitan Beta3

Question

I was installing nodejs for Symphony when I hit an "Operation not permitted" error. Anyone know why this happened?

MacBook-Pro-de-XXX:~ XXX$ sudo ln -s /usr/local/bin/node /usr/bin/node

Password:

ln: /usr/bin/node: Operation not permitted

First check whether /usr/bin/node is already set up. If you want to change it, you can use ln -sf to force the symlink. — , Jul 16 '15 at 11:55
MacBook-Pro-de-XXX:~ XXX$ ls -la /usr/bin/node ls: /usr/bin/node: No such file or directory — Kurr0, Jul 16 '15 at 12:03

Haru · Accepted Answer · 2015-10-27T08:28:24.093

72

This is the so called "rootless" mode in the new version of OS X. It effectively makes certain system directories read-only (even for admins). "/usr" is one of those protected directories (the only subdirectory that is excluded from this rule is "/usr/local")

One can disable this rootless mode with the following commands:

$ sudo nvram boot-args="rootless=0"
$ sudo reboot

But this is not recommended! The best practice is to install custom stuff to "/usr/local" only.

Update (27-Oct-15): 10.11 (El Capitan) Public Release

Please note that the above described workaround will not work with the public release of El Capitan anymore as Apple has changed things around.

The proper way to disable the "rootless" mode (aka System Integrity Protection, "SIP") is to boot temporarily into Recover Mode (hold Command+R during boot) and use the csrutil disable command (or csrutil enable to reenable) from the Terminal. The Terminal is reachable via the menu of the Installer that launches in Recovery Mode.

edited Oct 27 '15 at 08:28

answered Jul 16 '15 at 17:40

Haru

876

2

Might not be advisable, but for now MacTeX seems to expect /usr/texbin, so away we go! – David Lord Jul 29 '15 at 09:43
Modifying NVRAM to disable rootless mode doesn't work on El Capitan from (at least) the GM version forward. Check this answer for the method that works in the version that is out now: http://stackoverflow.com/questions/32590053/copying-file-under-root-got-failed-in-os-x-el-capitan-10-11/32590885#32590885 – Chris Ostmo Sep 17 '15 at 15:51
This not worked for me too. – gsscoder Oct 26 '15 at 07:14
1

still give me Operation not permitted – Sinux Feb 04 '16 at 06:21
2

My workaround was to install to /usr/local/bin – fIwJlxSzApHEZIl Feb 23 '16 at 18:33

score -2 · Answer 2 · answered Apr 03 '16 at 03:59

-2

In my version of El Capitan the /bin directory did not exist :

/usr/local/bin

So, the fix was :

mkdir -p /usr/local/bin

The -p flag will create the dir (and incidentally any dirs in the full path) if it does not exist.

Then you can create symlinks & copy apps to /usr/local/bin because /usr/local not part of the "rootless" mode.

answered Apr 03 '16 at 03:59

Eric P

11

It does not help to solve the issue. Sometimes you just need symlinks in /usr/bin and cannot avoid that. – User366 Sep 20 '16 at 09:57

Unix "ln -s" command not permitted in OSX El Capitan Beta3

2 Answers2