Mac Error 1 — Operation Not Permitted
About Mac Error 1
Mac error code 1 'Operation not permitted' occurs when a process lacks the required permissions, often due to Full Disk Access restrictions. This guide covers everything you need to know about this topic, including common causes, step-by-step solutions, and answers to frequently asked questions.
Here are the key things to understand: EPERM (error 1) is a POSIX permission denied error. macOS Mojave+ introduced privacy protections requiring explicit permission grants. Terminal and scripts need Full Disk Access to access protected directories. Affects ~/Desktop, ~/Documents, ~/Downloads, Mail, Safari data, and more. Different from error 13 (EACCES) which is traditional Unix permission. Understanding these fundamentals will help you diagnose and resolve this issue more effectively.
The most common reasons this occurs include: Application or Terminal not granted Full Disk Access in Security preferences. SIP preventing modification of system-protected files. TCC (Transparency, Consent, and Control) database denying access. Running a script that accesses privacy-protected user data. Cron job or LaunchDaemon lacking necessary entitlements. Identifying the root cause is the first step toward finding the right solution.
To resolve this, follow these recommended steps: Grant Full Disk Access: System Preferences > Security & Privacy > Privacy > Full Disk Access > add Terminal or the app. For automation tools, also grant Automation permissions in the Privacy tab. Check SIP status: csrutil status in Terminal. For scripts, ensure the parent process (Terminal, iTerm) has Full Disk Access. Reset TCC database if corrupted: tccutil reset All (caution: resets all privacy permissions). If these steps do not resolve the issue, consider consulting additional resources or a qualified professional.
This article is part of our Mac Error Codes collection on Error Codes Wiki. We provide comprehensive, up-to-date information to help you find solutions quickly.
Quick Answer
What is Full Disk Access?
A macOS privacy permission that allows an app to access protected user data including Desktop, Documents, Downloads, and system databases.
Overview
Mac error code 1 'Operation not permitted' occurs when a process lacks the required permissions, often due to Full Disk Access restrictions.
Key Details
- EPERM (error 1) is a POSIX permission denied error
- macOS Mojave+ introduced privacy protections requiring explicit permission grants
- Terminal and scripts need Full Disk Access to access protected directories
- Affects ~/Desktop, ~/Documents, ~/Downloads, Mail, Safari data, and more
- Different from error 13 (EACCES) which is traditional Unix permission
Common Causes
- Application or Terminal not granted Full Disk Access in Security preferences
- SIP preventing modification of system-protected files
- TCC (Transparency, Consent, and Control) database denying access
- Running a script that accesses privacy-protected user data
- Cron job or LaunchDaemon lacking necessary entitlements
Steps
- 1Grant Full Disk Access: System Preferences > Security & Privacy > Privacy > Full Disk Access > add Terminal or the app
- 2For automation tools, also grant Automation permissions in the Privacy tab
- 3Check SIP status: csrutil status in Terminal
- 4For scripts, ensure the parent process (Terminal, iTerm) has Full Disk Access
- 5Reset TCC database if corrupted: tccutil reset All (caution: resets all privacy permissions)