ホーム / OSX /

homebrewのroot権限を落とす

2016/09/04

OSX

t f B! P L
記事内に広告が含まれています。

brew updateがエラーになる

Macでパッケージシステムを使うとき、コマンドをインストールするユーザと使うユーザとは分けておいたほうが安全だ、ということで、Homebrewをrootでインストールしていたのだが、最近、brew updateすると 
Updating brew...
Error: Running Homebrew as root is extremely dangerous. As Homebrew does not
drop privileges on installation you are giving all build scripts full access
to your system. As a result of the OS X sandbox not handling the root user
correctly HOMEBREW_NO_SANDBOX has been set so the sandbox will not be used. If
we have not merged a pull request to add privilege dropping by November 1st
2016 running Homebrew as root will be disabled. No Homebrew maintainers plan
to work on this functionality.
Error: Running Homebrew as root is extremely dangerous. As Homebrew does not
drop privileges on installation you are giving all build scripts full access
to your system. As a result of the OS X sandbox not handling the root user
correctly HOMEBREW_NO_SANDBOX has been set so the sandbox will not be used. If
we have not merged a pull request to add privilege dropping by November 1st
2016 running Homebrew as root will be disabled. No Homebrew maintainers plan
to work on this functionality.
Updated Homebrew from 8bf787c to d39eeac.
Updated 6 taps (caskroom/cask, homebrew/boneyard, homebrew/core, homebrew/versions, mackerelio/mackerel-agent, motemen/mackerel-agent).
==> New Formulae
 :
と、エラーが出るようになった。rootでHomebrewを使うのは危険だし、root権限を途中で捨てるような処理を入れるつもりもないよ。ということのようだ。

brew doctorで修正方法を調べる

今までrootで使ってきたのだが、再インストールしないとだめなのか？それは面倒だから勘弁してほしい。
まずはbrew doctorしてみる。 
dummy $ brew doctor
Please note that these warnings are just used to help the Homebrew maintainers
with debugging if you file an issue. If everything you use Homebrew for is
working fine: please don't worry and just ignore them. Thanks!

Warning: /usr/local/Frameworks isn't writable.

This can happen if you "sudo make install" software that isn't managed
by Homebrew. If a formula tries to write a file to this directory, the
install will fail during the link step.

You should change the ownership and permissions of /usr/local/Frameworks back to
your user account.
  sudo chown -R $(whoami) /usr/local/Frameworks

Warning: /Users/dummy/Library/Caches/Homebrew isn't writable.
This can happen if you run `brew install` or `brew fetch` as another user.
Homebrew caches downloaded files to this location.

You should change the ownership and permissions of /Users/dummy/Library/Caches/Homebrew
back to your user account.
  sudo chown -R $(whoami) /Users/dummy/Library/Caches/Homebrew

Warning: /usr/local is not writable.

You should change the ownership and permissions of /usr/local
back to your user account.
  sudo chown -R $(whoami) /usr/local

Warning: /Users/dummy/Library/Logs/Homebrew isn't writable.
Homebrew writes debugging logs to this location.

You should change the ownership and permissions of /Users/dummy/Library/Logs/Homebrew
back to your user account.
  sudo chown -R $(whoami) /Users/dummy/Library/Logs/Homebrew

Warning: /usr/local/opt isn't writable.

You should change the ownership and permissions of /usr/local/opt
back to your user account.
  sudo chown -R $(whoami) /usr/local/opt

Warning: Some directories in /usr/local/share/locale aren't writable.
This can happen if you "sudo make install" software that isn't managed
by Homebrew. If a brew tries to add locale information to one of these
directories, then the install will fail during the link step.

You should `sudo chown -R $(whoami)` them:
    /usr/local/share/locale
    /usr/local/share/locale/af
    /usr/local/share/locale/af/LC_MESSAGES
    /usr/local/share/locale/am
    /usr/local/share/locale/am/LC_MESSAGES
    /usr/local/share/locale/an
    /usr/local/share/locale/an/LC_MESSAGES
    /usr/local/share/locale/ar
    /usr/local/share/locale/ar/LC_MESSAGES
    /usr/local/share/locale/as
    /usr/local/share/locale/as/LC_MESSAGES
    /usr/local/share/locale/ast
    /usr/local/share/locale/ast/LC_MESSAGES
    /usr/local/share/locale/az
    /usr/local/share/locale/az/LC_MESSAGES
    /usr/local/share/locale/be
    /usr/local/share/locale/be/LC_MESSAGES
    /usr/local/share/locale/be@latin
    /usr/local/share/locale/be@latin/LC_MESSAGES
    /usr/local/share/locale/bg
    /usr/local/share/locale/bg/LC_MESSAGES
    /usr/local/share/locale/bn
    /usr/local/share/locale/bn/LC_MESSAGES
    /usr/local/share/locale/bn_IN
    /usr/local/share/locale/bn_IN/LC_MESSAGES
    /usr/local/share/locale/bs
    /usr/local/share/locale/bs/LC_MESSAGES
    /usr/local/share/locale/ca
    /usr/local/share/locale/ca/LC_MESSAGES
    /usr/local/share/locale/ca@valencia
    /usr/local/share/locale/ca@valencia/LC_MESSAGES
    /usr/local/share/locale/cs
    /usr/local/share/locale/cs/LC_MESSAGES
    /usr/local/share/locale/cy
    /usr/local/share/locale/cy/LC_MESSAGES
    /usr/local/share/locale/da
    /usr/local/share/locale/da/LC_MESSAGES
    /usr/local/share/locale/de
    /usr/local/share/locale/de/LC_MESSAGES
    /usr/local/share/locale/dz
    /usr/local/share/locale/dz/LC_MESSAGES
    /usr/local/share/locale/el
    /usr/local/share/locale/el/LC_MESSAGES
    /usr/local/share/locale/en
    /usr/local/share/locale/en/LC_MESSAGES
    /usr/local/share/locale/en@shaw
    /usr/local/share/locale/en@shaw/LC_MESSAGES
    /usr/local/share/locale/en_CA
    /usr/local/share/locale/en_CA/LC_MESSAGES
    /usr/local/share/locale/en_GB
    /usr/local/share/locale/en_GB/LC_MESSAGES
    /usr/local/share/locale/eo
    /usr/local/share/locale/eo/LC_MESSAGES
    /usr/local/share/locale/es
    /usr/local/share/locale/es/LC_MESSAGES
    /usr/local/share/locale/et
    /usr/local/share/locale/et/LC_MESSAGES
    /usr/local/share/locale/eu
    /usr/local/share/locale/eu/LC_MESSAGES
    /usr/local/share/locale/fa
    /usr/local/share/locale/fa/LC_MESSAGES
    /usr/local/share/locale/fi
    /usr/local/share/locale/fi/LC_MESSAGES
    /usr/local/share/locale/fr
    /usr/local/share/locale/fr/LC_MESSAGES
    /usr/local/share/locale/ga
    /usr/local/share/locale/ga/LC_MESSAGES
    /usr/local/share/locale/gd
    /usr/local/share/locale/gd/LC_MESSAGES
    /usr/local/share/locale/gl
    /usr/local/share/locale/gl/LC_MESSAGES
    /usr/local/share/locale/gu
    /usr/local/share/locale/gu/LC_MESSAGES
    /usr/local/share/locale/he
    /usr/local/share/locale/he/LC_MESSAGES
    /usr/local/share/locale/hi
    /usr/local/share/locale/hi/LC_MESSAGES
    /usr/local/share/locale/hr
    /usr/local/share/locale/hr/LC_MESSAGES
    /usr/local/share/locale/hu
    /usr/local/share/locale/hu/LC_MESSAGES
    /usr/local/share/locale/hy
    /usr/local/share/locale/hy/LC_MESSAGES
    /usr/local/share/locale/id
    /usr/local/share/locale/id/LC_MESSAGES
    /usr/local/share/locale/is
    /usr/local/share/locale/is/LC_MESSAGES
    /usr/local/share/locale/it
    /usr/local/share/locale/it/LC_MESSAGES
    /usr/local/share/locale/ja
    /usr/local/share/locale/ja/LC_MESSAGES
    /usr/local/share/locale/ka
    /usr/local/share/locale/ka/LC_MESSAGES
    /usr/local/share/locale/kk
    /usr/local/share/locale/kk/LC_MESSAGES
    /usr/local/share/locale/kn
    /usr/local/share/locale/kn/LC_MESSAGES
    /usr/local/share/locale/ko
    /usr/local/share/locale/ko/LC_MESSAGES
    /usr/local/share/locale/ku
    /usr/local/share/locale/ku/LC_MESSAGES
    /usr/local/share/locale/lt
    /usr/local/share/locale/lt/LC_MESSAGES
    /usr/local/share/locale/lv
    /usr/local/share/locale/lv/LC_MESSAGES
    /usr/local/share/locale/mai
    /usr/local/share/locale/mai/LC_MESSAGES
    /usr/local/share/locale/mg
    /usr/local/share/locale/mg/LC_MESSAGES
    /usr/local/share/locale/mk
    /usr/local/share/locale/mk/LC_MESSAGES
    /usr/local/share/locale/ml
    /usr/local/share/locale/ml/LC_MESSAGES
    /usr/local/share/locale/mn
    /usr/local/share/locale/mn/LC_MESSAGES
    /usr/local/share/locale/mr
    /usr/local/share/locale/mr/LC_MESSAGES
    /usr/local/share/locale/ms
    /usr/local/share/locale/ms/LC_MESSAGES
    /usr/local/share/locale/nb
    /usr/local/share/locale/nb/LC_MESSAGES
    /usr/local/share/locale/nds
    /usr/local/share/locale/nds/LC_MESSAGES
    /usr/local/share/locale/ne
    /usr/local/share/locale/ne/LC_MESSAGES
    /usr/local/share/locale/nl
    /usr/local/share/locale/nl/LC_MESSAGES
    /usr/local/share/locale/nn
    /usr/local/share/locale/nn/LC_MESSAGES
    /usr/local/share/locale/oc
    /usr/local/share/locale/oc/LC_MESSAGES
    /usr/local/share/locale/or
    /usr/local/share/locale/or/LC_MESSAGES
    /usr/local/share/locale/pa
    /usr/local/share/locale/pa/LC_MESSAGES
    /usr/local/share/locale/pl
    /usr/local/share/locale/pl/LC_MESSAGES
    /usr/local/share/locale/ps
    /usr/local/share/locale/ps/LC_MESSAGES
    /usr/local/share/locale/pt
    /usr/local/share/locale/pt/LC_MESSAGES
    /usr/local/share/locale/pt_BR
    /usr/local/share/locale/pt_BR/LC_MESSAGES
    /usr/local/share/locale/ro
    /usr/local/share/locale/ro/LC_MESSAGES
    /usr/local/share/locale/ru
    /usr/local/share/locale/ru/LC_MESSAGES
    /usr/local/share/locale/rw
    /usr/local/share/locale/rw/LC_MESSAGES
    /usr/local/share/locale/si
    /usr/local/share/locale/si/LC_MESSAGES
    /usr/local/share/locale/sk
    /usr/local/share/locale/sk/LC_MESSAGES
    /usr/local/share/locale/sl
    /usr/local/share/locale/sl/LC_MESSAGES
    /usr/local/share/locale/sq
    /usr/local/share/locale/sq/LC_MESSAGES
    /usr/local/share/locale/sr
    /usr/local/share/locale/sr/LC_MESSAGES
    /usr/local/share/locale/sr@ije
    /usr/local/share/locale/sr@ije/LC_MESSAGES
    /usr/local/share/locale/sr@latin
    /usr/local/share/locale/sr@latin/LC_MESSAGES
    /usr/local/share/locale/sv
    /usr/local/share/locale/sv/LC_MESSAGES
    /usr/local/share/locale/ta
    /usr/local/share/locale/ta/LC_MESSAGES
    /usr/local/share/locale/te
    /usr/local/share/locale/te/LC_MESSAGES
    /usr/local/share/locale/tg
    /usr/local/share/locale/tg/LC_MESSAGES
    /usr/local/share/locale/th
    /usr/local/share/locale/th/LC_MESSAGES
    /usr/local/share/locale/tl
    /usr/local/share/locale/tl/LC_MESSAGES
    /usr/local/share/locale/tr
    /usr/local/share/locale/tr/LC_MESSAGES
    /usr/local/share/locale/tt
    /usr/local/share/locale/tt/LC_MESSAGES
    /usr/local/share/locale/ug
    /usr/local/share/locale/ug/LC_MESSAGES
    /usr/local/share/locale/uk
    /usr/local/share/locale/uk/LC_MESSAGES
    /usr/local/share/locale/vi
    /usr/local/share/locale/vi/LC_MESSAGES
    /usr/local/share/locale/wa
    /usr/local/share/locale/wa/LC_MESSAGES
    /usr/local/share/locale/xh
    /usr/local/share/locale/xh/LC_MESSAGES
    /usr/local/share/locale/yi
    /usr/local/share/locale/yi/LC_MESSAGES
    /usr/local/share/locale/zh_CN
    /usr/local/share/locale/zh_CN/LC_MESSAGES
    /usr/local/share/locale/zh_HK
    /usr/local/share/locale/zh_HK/LC_MESSAGES
    /usr/local/share/locale/zh_TW
    /usr/local/share/locale/zh_TW/LC_MESSAGES

Warning: Some directories in /usr/local/share/man aren't writable.
This can happen if you "sudo make install" software that isn't managed
by Homebrew. If a brew tries to add locale information to one of these
directories, then the install will fail during the link step.

You should `sudo chown -R $(whoami)` them:
    /usr/local/share/man/de
    /usr/local/share/man/de/man1
    /usr/local/share/man/es
    /usr/local/share/man/es/man1
    /usr/local/share/man/fr
    /usr/local/share/man/fr/man1
    /usr/local/share/man/hr
    /usr/local/share/man/hr/man1
    /usr/local/share/man/hu
    /usr/local/share/man/hu/man1
    /usr/local/share/man/it
    /usr/local/share/man/it/man1
    /usr/local/share/man/man4
    /usr/local/share/man/man5
    /usr/local/share/man/man7
    /usr/local/share/man/man8
    /usr/local/share/man/pl
    /usr/local/share/man/pl/man1
    /usr/local/share/man/pt_BR
    /usr/local/share/man/pt_BR/man1
    /usr/local/share/man/pt_PT
    /usr/local/share/man/pt_PT/man1
    /usr/local/share/man/ro
    /usr/local/share/man/ro/man1
    /usr/local/share/man/ru
    /usr/local/share/man/ru/man1
    /usr/local/share/man/sk
    /usr/local/share/man/sk/man1
    /usr/local/share/man/zh
    /usr/local/share/man/zh/man1

Warning: /usr/local/lib/python2.7/site-packages isn't writable.
This can happen if you "sudo pip install" software that isn't managed
by Homebrew. If you install a formula with Python modules, the install
will fail during the link step.

You should change the ownership and permissions of /usr/local/lib/python2.7/site-packages
back to your user account.
  sudo chown -R $(whoami) /usr/local/lib/python2.7/site-packages

Warning: /usr/local is not writable.
Even if this directory was writable when you installed Homebrew, other
software may change permissions on this directory. For example, upgrading
to OS X El Capitan has been known to do this. Some versions of the
"InstantOn" component of Airfoil or running Cocktail cleanup/optimizations
are known to do this as well.

You should change the ownership and permissions of /usr/local back to
your user account.
  sudo chown -R $(whoami) /usr/local

Warning: /usr/local/var isn't writable.

This can happen if you "sudo make install" software that isn't managed
by Homebrew. If a formula tries to write a file to this directory, the
install will fail during the link step.

You should change the ownership and permissions of /usr/local/var back to
your user account.
  sudo chown -R $(whoami) /usr/local/var

Warning: Your XQuartz (2.7.8) is outdated
Please install XQuartz 2.7.9:
  https://xquartz.macosforge.org

Warning: You have unlinked kegs in your Cellar
Leaving kegs unlinked can lead to build-trouble and cause brews that depend on
those kegs to fail to run properly once built. Run `brew link` on these:
    gnutls2

Warning: Homebrew's sbin was not found in your PATH but you have installed
formulae that put executables in /usr/local/sbin.
Consider setting the PATH for example like so
  echo 'export PATH="/usr/local/sbin:$PATH"' >> ~/.bash_profile

Warning: Your Homebrew is outdated.
You haven't updated for at least 24 hours. This is a long time in brewland!
To update Homebrew, run `brew update`.
dummy $

修正方法が長々と表示されたが、
  sudo chown -R $(whoami) /usr/local
でほとんど片付いてしまうようだ。

brew doctorに従って修正する

brew doctorに従ってディレクトリの権限を直せば、移行作業終了。outdatedだとかunlinkedだとかはrootの問題ではないので、別途対応すればよい。でもこれ、間違って/usr/local/以下のファイルを消しても気がつかないよね。ファイルがないならエラーで気付くかもしれないけど、違う内容で上書きしていたら結構悲惨だ。
アプリケーションフォルダは 
drwxrwxr-x+ 126 root  admin  4284  9  3 06:12 /Applications/
 となっているから、多少マシか？でも、自分がインストールできるよう、adminグループに入れているだろうから、あまり変わらないか。
ますますTimeMachineでのバックアップが重要になったという気がする。
楽天で探す
楽天市場
 にほんブログ村 ＩＴ技術ブログへ

人気の投稿

  • 本日のお買い物
    SH906iとペアリングさせる。SH906iを新規機器登録状態にして、BT3030をペアリングモードに すればOK。パスキー0000をSH906iに入力すれば、登録完了。 ワンセグの音声も、ミュージックもOK。って、まだ家の中でしか試していないけど。
  • ThunderbirdとGmailのIMAP4
    Thunderbird 2.0.0.14 Windows版で、 アカウント設定画面のサーバ設定で「ヘッダのみ取得する」をチェックしておくと、 メールメッセージをDrag&DropでIMAP4のメールボックスへ移した際、ヘッダのみ 移ったように見えるようだ。 POP3サー...
  • Spring Bootで日本語パラメータが文字化けする
    日本語が文字化け とても便利な Spring Boot 。改修予算がなくてオワコンのstrutsを使い続けなければならないプロジェクトが続いていたので、ようやくまともな世界に移れた!と思ったら、まさかの文字化け問題 orz デフォルトは化けない Spring Bootの...
  • Apache HttpClientでKeep-Aliveを設定する
    プログラムから外部のWeb APIを呼び出すことはよくあることで、HttpURLConnectionクラスを使ったり、 OkHttp などのライブラリを使ったりするようです。ちょっと古い？ HttpClient を使っているプロジェクトで、HTTPのKeep Aliveを見直す...
  • Developers Consoleを新しくする前にDB Migrationを行うこと
    Google app engine にアクセスすると、「新しいDevelopers Consoleを試す」というリンクが出てくるけど、ちょっと待て。DBのマイグレーションは行った？ 古いアプリケーションだとMaster-Slave Datastoreを使っているだろうが、 Ma...
Hiroaki's blog

ブログ アーカイブ

自己紹介

パワハラをなぁなぁで済まそうとする奴がCxOやっている会社を辞めました。ストックオプションは半分しか行使できなかったけど、あんな人たちには関わりたくないですね。

アフィリエイト

  • 当ブログ「Hiroaki's blog」は、amazon.co.jpを宣伝しリンクすることによってサイトが紹介料を獲得できる手段を提供することを目的に設定されたアフィリエイト宣伝プログラムである、Amazonアソシエイト・プログラムの参加者です。
  • 当ブログでは、第三者配信による広告サービスを利用しています。このような広告配信事業者は、ユーザーの興味に応じた商品やサービスの広告を表示するため、当サイトや他サイトへのアクセスに関する情報 (氏名、住所、メール アドレス、電話番号は含まれません) を使用することがあります。このプロセスの詳細やこのような情報が広告配信事業者に使用されないようにする方法については、ここをクリックしてください。
  • アクセストレードアフィリエイトプログラムに参加しています。
  • A8.netアフィリエイトプログラムに参加しています。
  • バリューコマースアフィリエイトプログラムに参加しています。
  • もしもアフィリエイトプログラムに参加しています。

プライバシーポリシー

当サイトにアクセスされる場合、IPアドレスなどの情報または閲覧状況に関するデータが機械的に生成され、場合によっては個人情報と関連付けられる可能性があります。プライバシー保護に関する適用法に準じて、これらの通信および閲覧に関するデータを収集、処理、および利用することがあります。
当サイトにアクセスされる場合、非個人情報（ブラウザの種類、OSの種類、ドメイン名、訪問数、平均滞在時間、ページ・ビューなど個人を特定できない情報）が自動収集される場合があります。当サイトのパフォーマンスやコンテンツを改善する目的で、これらの情報を利用する場合があります。
アフィリエイトでは成果を把握するためにcookie等を利用しています。それ以外の目的で使用されることはありません。詳しくは各社のページにて確認してください。
本サイトに掲載する情報に関しては、正しいものを提供することを務めていますが、掲載内容から、いかなる損失や損害などの被害が発生しても、当ブログでは責任を追いかねます。

改正電気通信事業法に関する表記

・掲載内容

当サイトでは成果報酬型広告/クリック型広告の効果測定のため、利用者の方のアクセス情報を外部事業者に送信しております。
当該の情報は個人を特定する情報ではございません。また当該の情報が目的外利用される事は一切御座いません。

１．送信される情報の内容
  • 広告の表示日時
  • 広告のクリック日時
  • 広告の計測に必要なクッキー情報
  • 広告表示時及び広告クリック時のIPアドレス
  • 広告表示時及び広告クリック時に使用されたインターネット端末およびインターネットブラウザの種類
２．送信先となる事業者の氏名又は名称
  • グーグル合同会社
  • 楽天グループ株式会社
  • アマゾンジャパン合同会社
  • ヤフー株式会社
  • 株式会社ファンコミュニケーションズ
  • 株式会社もしも
３．利用目的

成果報酬型広告/クリック型広告の効果測定および不正防止のため

QooQ