1

I'm developing some low-level system tools that need to read the physical storage device. Prior to macOS 10.13, I was able to open /dev/disk0, /dev/disk1, etc. and read raw data from the device. But after upgrading, I'm no longer able to open these devices, and I get "Operation not permitted" errors, even though I'm running as sudo. Is there a way to access the physical drive in this version?

Dmitry Brant
  • 7,612
  • 2
  • 29
  • 47
  • This doesn't sound like a programming question. It's more of a sysadmin question about device permissions (and maybe access controls other than Unix mode bits). Try asking on https://apple.stackexchange.com/. In your question there, include `ls -l` output for `/dev/disk0`, and dump the ACLs if possible. – Peter Cordes Oct 07 '17 at 03:15
  • Hmm, fair enough. I'll migrate to Apple SE. – Dmitry Brant Oct 08 '17 at 16:26

1 Answers1

2

Macos10.13, must disable the SIP to access the disk0.

1.boot into recovery

2.execute cmdline: csrutil disable

ref: https://www.easeus.com/mac-data-recovery-software/data-recovery-from-system-disk-under-new-macos.html

uame426
  • 36
  • 3