Hi @xsyncguy
Glad you are getting somewhere, and the information was useful to you!
An account on a Mac with admin capabilities is ok to use. It does not mean it is big security risk, as you still need to enter your password whenever you escalate your privileges to install a program, or run an admin command in Terminal (ie using the sudo
command).
You are not running as admin all the time - you just have the capability to escalate to a admin user if required. Also someone has to admin the computer
This âadmin accountâ concern mainly comes from the Windows world - when older versions of windows didnât provide this separation between user and admin. These days even that situation has improved with the introduction of Windows User Account Control (UAC). So dont be too concerned about your accounts having admin capabilities - it isnât the same as running as a root user all the time. All security is about managing risk - balanced against being able to do what you need too do - like enjoying using your computer!
With regards to your questions:
The drwxr-xr-x in a listing indicates a directory or folder (same difference).
So when you see output of ls -l
similar to below:
MystixMac:test deb$ ls -l
total 0
drwxr-xr-x 2 deb staff 68 27 Dec 22:32 test-dir1
drwxr-xr-x 2 deb staff 68 27 Dec 22:32 test-dir2
-rw-r--r-- 1 deb staff 0 27 Dec 22:32 testfile1.txt
-rw-r--r-- 1 deb staff 0 27 Dec 22:32 testfile2.txt
The first two shown above test-dir1
and test-dir2
are directories - indicated by the d and then followed by the permissions for that directory - which work the same as described earlier for files. The two others listed testfile1.txt
and testfile2.txt
are just files - so they are missing the leading d.
With regards the @
symbol - this indicates the file or directory has extended attributes. These are additional bits of information the computer stores about the file or directory. The command: ls -l@
will show you additional information for the extended attribute. These are managed with the command: xattr
(see man xattr
for more information). These are quite common on Mac files systems, and the attributes have probably been added by whatever application was used to create the files in the first place (Word processor, drawing application, etc).
As it is only you using the computer (ie one user account ZZZ) on each - then you should not have to worry about other uses on the computer snooping into your files - which the restrictive permission guard against. You can therefore make the permission less restrictive - and see if this fixes Syncthing problems.
As you suggested - you could try changing the permissions on the directories with the permission drwx------@
which only allows the user access at the moment.
As per the listing above - I have changed the test-dir1
to match the permssion you are seeing. This was done with the command: chmod 700 test-dir
. The listing now looks like this:
MystixMac:test deb$ ls -l
total 0
drwx------ 2 deb staff 68 27 Dec 22:32 test-dir1
drwxr-xr-x 2 deb staff 68 27 Dec 22:32 test-dir2
-rw-r--r-- 1 deb staff 0 27 Dec 22:32 testfile1.txt
-rw-r--r-- 1 deb staff 0 27 Dec 22:32 testfile2.txt
If I run the command: chmod 755 test-dir1
it changes the permissions too:
MystixMac:test deb$ ls -la
total 0
drwxr-xr-x 6 deb staff 204 27 Dec 22:32 .
drwxr-xr-x+ 22 deb staff 748 27 Dec 22:32 ..
drwxr-xr-x 2 deb staff 68 27 Dec 22:32 test-dir1
drwxr-xr-x 2 deb staff 68 27 Dec 22:32 test-dir2
-rw-r--r-- 1 deb staff 0 27 Dec 22:32 testfile1.txt
-rw-r--r-- 1 deb staff 0 27 Dec 22:32 testfile2.txt
You can alter all the directories and files to be the same permission with: chmod 755 *
- but be careful you dont run this in the wrong folder when in Terminal!
Try changing a few of the files and directories on the computer that Syncthing has issues with - and then see if it reduces the number of files it is flagging as problems.
Hope that sorts it for you!
Cheers
Simon