OS X 10.11 (15A279b): Allow root to have read/write access to /System/Library/CoreServices/DefaultDesktop.jpg

Originator:rtrouton
Number:rdar://22559055 Date Originated:03-Sep-2015 01:00 PM
Status:Open Resolved:
Product:OS X Product Version:OS X 10.11 (15A279b)
Classification:Other Bug Reproducible:Always
 
Summary:

The /System/Library/CoreServices/DefaultDesktop.jpg symlink is locked by System Integrity Protection (SIP) and cannot be modified.

Being able to change this file will allow an admin to change the default picture for the machine.

In my testing, I was not able to delete /System/Library/CoreServices/DefaultDesktop.jpg or move it. 



Steps to Reproduce:

1. Go to /System/Library/CoreServices in Finder.

2. Attempt to manipulate /System/Library/CoreServices/DefaultDesktop.jpg (rename symlink, remove symlink). File is locked.

4. Do same process in Terminal. Even as sudo, permission denied.



Expected Results:

Should be able to rename or delete /System/Library/CoreServices/DefaultDesktop.jpg symlink, or replace with different .jpg file.



Actual Results:

Cannot modify symlink or replace with a different .jpg file.

Notes:

The use case for this change is to allow the customization of the default desktop background. This is used by a number of companies, schools and institutions to set a branded or otherwise custom desktop background for their users.

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!