Bug 147103 - [Calc][Writer][FILESAVE] MacOS: Calc and Writer can't save or save-as, after reinstall PROBLEM "not being sandboxed" is logged
Summary: [Calc][Writer][FILESAVE] MacOS: Calc and Writer can't save or save-as, after ...
Status: RESOLVED INSUFFICIENTDATA
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: LibreOffice (show other bugs)
Version:
(earliest affected)
7.1.8.1 release
Hardware: x86-64 (AMD64) macOS (All)
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-02-01 00:00 UTC by MK
Modified: 2023-03-28 15:01 UTC (History)
0 users

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description MK 2022-02-01 00:00:47 UTC
Version 7.1.8. (installed over version 7.0.5) was unable to save a new, unnamed document.

The Save or Save-as dialog never appears, only the wheel of death spins for 30 seconds.

Resolved by:
- Losing formulas and formatting.
- Opening Konsole, finding no PROBLEM (red dot)
- Removed version 7.1.8.1
- Installed version 7.1.8.1 and language pack

The save and save-as dialogs appear, but the Konsole shows 2 PROBLEMS (red dot)

problem	cfprefsd Allowing process impersonation by process com.apple.appkit.xpc.openAndSav (9318) despite not having the com.apple.private.defaults-impersonate entitlement due to it not being sandboxed. Please add com.apple.private.defaults-impersonate instead, this will stop working in the future.

problem	cfprefsd Allowing process impersonation by process com.apple.appkit.xpc.openAndSav (9327) despite not having the com.apple.private.defaults-impersonate entitlement due to it not being sandboxed. Please add com.apple.private.defaults-impersonate instead, this will stop working in the future.
Comment 1 MK 2022-02-01 00:13:19 UTC
Same PROBLEMS are logged when saving a Writer document


problem	01:08:38.012196+0100	cfprefsd	Allowing process impersonation by process com.apple.appkit.xpc.openAndSav (9591) despite not having the com.apple.private.defaults-impersonate entitlement due to it not being sandboxed. Please add com.apple.private.defaults-impersonate instead, this will stop working in the future.

problem	01:08:38.012274+0100	cfprefsd	Allowing process impersonation by process com.apple.appkit.xpc.openAndSav (9591) despite not having the com.apple.private.defaults-impersonate entitlement due to it not being sandboxed. Please add com.apple.private.defaults-impersonate instead, this will stop working in the future.
Comment 2 Alex Thurgood 2022-02-01 08:56:50 UTC
@MK : does this happen if you grant the newly installed app bundle full disk access in the security settings ?
Comment 3 Alex Thurgood 2022-02-01 08:57:50 UTC
Sounds very much like bug 128233 to me.
Comment 4 Alex Thurgood 2022-02-01 08:59:44 UTC
See in particular #c59 of bug 128233
Comment 5 MK 2022-02-01 18:43:56 UTC
Hi @Alex,
I gave version 7.1.8. (installed over version 7.0.5) full disk access, in an attempt to rescue the spreadsheet, but it did not help.

I just found that version 7.1.8. (installed without a previous version) still has full disk access. 

I removed full disk access, rebooted the Mac: saving is possible but creates the 2 "impersonate" problem log messages. 


You wrote in #c59 of bug 128233
The app should prompt the user each time it requires access to an as yet unauthorised folder (be that local or remote), including on installation of a new version.


Version 7.1.8. (installed without a previous version) can save without a prompt for consent.


Does the consent you and VMWARE mention only apply to sandboxed applications?

VMWARE = https://techzone.vmware.com/blog/vmware-workspace-one-uem-apple-macos-mojave-user-consent-data-access


Is LibreOffice sandboxed? 

As I read the log message, it is not and therefore it uses a depricated method for saving.
Comment 6 MK 2022-02-01 18:56:54 UTC
Following   https://developer.apple.com/library/archive/documentation/Security/Conceptual/AppSandboxDesignGuide/AppSandboxQuickStart/AppSandboxQuickStart.html#//apple_ref/doc/uid/TP40011183-CH2-SW2

- In Activity Monitor, check that the system recognizes the app as sandboxed.

- Launch Activity Monitor (available in /Applications/Utilities).
- In Activity Monitor, choose View > Columns.
- Ensure that the Sandbox menu item is checked.
- In the Sandbox column, confirm that the value for the Quick Start app is Yes.
- To make it easier to locate the app in Activity monitor, enter the name of the Quick Start app in the Filter field.



Search for LibreOffice and find it not sandboxed.
Comment 7 MK 2022-02-01 19:18:48 UTC
The sandbox warning helps is of little help to find the root cause:
- If LibreOffice cannot open the save dialog, the sandbox warning is not created.
- If LibreOffice can open the save dialog, the sandbox warning is created.
- LibreOffice is not sandboxed.
Comment 8 QA Administrators 2022-02-02 03:41:33 UTC Comment hidden (obsolete)
Comment 9 Alex Thurgood 2022-02-02 11:17:36 UTC
No repro with

Version: 7.2.5.2 / LibreOffice Community
Build ID: 499f9727c189e6ef3471021d6132d4c694f357e5
CPU threads: 8; OS: Mac OS X 12.1; UI render: default; VCL: osx
Locale: fr-FR (fr_FR.UTF-8); UI: fr-FR
Calc: threaded

Note that I'm using Monterey, not Mojave.

When I try to save a newly created Calc file for example, in the default "Documents" folder, I get asked whether to allow LO access to the folder. As I generally tend not to save my files there, I save the file to my Downloads folder (which already has disk access authorisation).

I checked the system logs to see if any cfprefsd warnings were logged - there were none.
Comment 10 eisa01 2023-03-24 19:45:32 UTC
Do you still have this issue on 7.5?
Comment 11 MK 2023-03-28 14:59:36 UTC
I no longer have a Mac
Comment 12 MK 2023-03-28 15:01:41 UTC
closing