install-darwin: fix symbolic perms for install cmd

[abathur]

Motivation

The symbolic form in use here doesn't seem to have an effect in either the BSD or coreutils install commands, leaving the daemon plist with empty permissions. This seems to cause its own problems.

I think I've got the right symbolic syntax now :)

I suspect this is the underlying cause in:

• nix profile [verb] failing on MacOS 14 with permission error #9702 (comment)
• Installer fails on macOS Ventura 13.6.3 #9969
• macOS installation: Could not find service "org.nixos.darwin-store" in domain for system #9978

(But I'll reserve confidence until after I've used the generated installer, uninstalled, and reinstalled...)

Context

$ touch inst1
$ /usr/bin/install -m -rw-r--r-- inst1 inst2
$ ls -la inst*
-rw-r--r-- 1 abathur _lpoperator      0 Feb 12 12:19 inst1
---------- 1 abathur _lpoperator      0 Feb 12 12:21 inst2

 $ rm inst2

$ /usr/bin/install -m "u=rw,go=r" inst1 inst2

$ ls -la inst*
-rw-r--r-- 1 abathur _lpoperator      0 Feb 12 12:19 inst1
-rw-r--r-- 1 abathur _lpoperator      0 Feb 13 01:17 inst2

Priorities and Process

Add 👍 to pull requests you find important.

The Nix maintainer team uses a GitHub project board to schedule and track reviews.

[runeksvendsen]

For what it's worth, regarding #9969 I got the exact same error executing the sudo launchctl load /Library/LaunchDaemons/org.nixos.nix-daemon.plist command (Load failed: 5: Input/output error) after manually correcting the permissions for /Library/LaunchDaemons/org.nixos.nix-daemon.plist. But it's certainly the right thing to do regardless of whether it fixes that issue.

[abathur]

For what it's worth, regarding #9969 I got the exact same error executing the sudo launchctl load /Library/LaunchDaemons/org.nixos.nix-daemon.plist command (Load failed: 5: Input/output error) after manually correcting the permissions for /Library/LaunchDaemons/org.nixos.nix-daemon.plist. But it's certainly the right thing to do regardless of whether it fixes that issue.

I'm not really sure what's causing Nix LaunchDaemons to end up in the disabled service list, but once they are there it does seem like the problem will persist until they are removed from that list or enabled. Setting the perms alone would fix it at that point (even if my hunch about the cause is right--and I'm less confident now as I've tried a few times unsuccessfully to reproduce the problem on a spare macbook).

[Ericson2314]

man install led me to man chmod, which confirmed this syntax. This seems legit.