Skip to content

Instantly share code, notes, and snippets.

Last active Mar 27, 2018
What would you like to do?
Fix AdressBook errors in OSX 10.11 (fixed in OSX 10.12)

For /var/log/system.log full of errors like these ones:

kernel[0]: Sandbox: deny(1) network-outbound /private/var/run/mDNSResponder[XXXXX]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1[XXXXX]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted

How to fix it?

Require SIP disabled and root access:

  1. update /System/Library/Sandbox/Profiles/ (see below)
  2. delete /Users/mems/Library/Containers/ (will be regenerated based on the updated sandbox profile)
  3. kill all processes named
  4. restart or

To update

  (or (entitlement "")
      (entitlement "")
      (entitlement ""))
  (deny network-outbound (literal "/private/var/run/mDNSResponder")))


  (or (entitlement "")
      (entitlement "")
      (entitlement "")
      (equal? (param "application_bundle_id") ""))
  (deny network-outbound (literal "/private/var/run/mDNSResponder"))) will still a bit unresponsive (spinning beach ball) when edit some contacts, but errors will stopped.

More about App Sandbox in OSX:


Copy link

fanzila commented Apr 27, 2016

Did not work for me on 10.11.4

Copy link

fanzila commented Apr 27, 2016

But this does :

Go to System Preferences>Internet Accounts
Uncheck "Contacts" for the Google account
Click the "+" to add a new account
Select "CardDAV"
Set Account Type to "Manual"
User Name is Gmail address
Password is password, or a new app-specific password if 2-factor authorization is "ON" for Google
Server Address is ""
Now enjoy your responsive Contacts app.

Copy link

oliveratgithub commented May 2, 2016

@fanzila Best solution, works like a charm!!! THANK YOU!

Copy link

webdevotion commented Jul 6, 2016

@fanzila's solution did not work for my CardDAV server. Same issue.
But OP's ( @mems ) solution worked although I still see a beach ball when I start editing.

Copy link

GHT54 commented Sep 26, 2016

Could you please be more explicit as to how update /System/Library/Sandbox/Profiles/ ?
What should one do with the texts starting with (unless... ? Type this in a Terminal window? But first logging into a specific directory?
Many thanks in advance.

Copy link

tweekmonster commented Jan 9, 2017

@fanzila's solution works for me on El Capitan.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment