Terminal: How to Open Applications with Root Privileges on a Mac

This updated guide examines Terminal: How to Open Applications with Root Privileges on a Mac and organizes the essential facts, background, and practical takeaways in clear American English.

Method 1of 3:

From an Admin Account

1. Know the risks. Most graphical applications are not designed for root access. Limit yourself to specific tasks you understand well, or you may end up with inaccessible files, application crashes, or security vulnerabilities.^[1]
2. Open Terminal. Log into an administrator account on your computer. Go toApplications?Utilitiesand launchTerminal.
   • This administrator account must have a non-blank password, or Terminal will not allow you to access root privileges.^[2]
3. Try the quick way. The sudo command lets you launch applications with root access, but it requires the path to the executable file within the application package. Most default Mac applications, as well as many third-party programs, organize the package contents the same way, so it's worth trying this:^[3]
   • Entersudo " file path from hard drive to application .app/Contents/MacOS/ application name ". For example, to open iTunes, typesudo "/Applications/iTunes.app/Contents/MacOS/iTunes"and press?Return.
   • Enter the password for the administrator account you are currently logged into. Press?Return.
   • If the command works, the application should open with root privileges. If Terminal says "command not found," continue to the next step.
4. Open the application's package contents. If the quick way didn't work, locate the application in Finder. Right-click (orControl-click) its icon and selectShow Package Contentsfrom the drop-down menu.
5. Find the executable file. You should now see one or more folders inside the application. Locate the executable file inside this folder. This is usually inside /Contents/MacOS.
   • The executable often has the same name as the application, but it could have another name, such as "run.sh."
   • The executable file icon is usually a black square with the word "exec" in small letters.
6. Type sudo into Terminal. Typesudofollowed by a space. Do not enter the command yet.
7. Drag the executable file into the Terminal line. This should automatically insert the file path to the executable file.
8. Confirm the command with your password. Hit?Return. Enter the password for the administrator account you are logged into, and press?Returnagain. The application should launch with root privileges.

Method 2of 3:

From a Non-Admin Account

1. Open Terminal in a non-admin account. Many system administrators prefer to work in an ordinary user account to limit the possible damage from mistakes or malware attacks.^[4]This method still requires an administrator password, but allows you to gain temporary root access without having to switch users. To get started, open a Terminal window.
2. Switch to an administrator within Terminal. Enter the commandsu -followed by a space and an administrator's username on this computer. Enter that administrator's password. You are now operating as that user.
   • The hyphen in the command is optional, but recommended. It sets the environmental variables and directory to those of the admin user, which limits the chance of accidental damage.^[5]
3. Open the application using sudo. The typical usage issudo " file path from hard drive to application .app/Contents/MacOS/ application name ". If this doesn't work or you need more guidance, refer to the administrator instructions above.
4. Return to your own account. Once you've completed all tasks that require root privileges, enterexitin Terminal. This will exit the administrator user and return you to your normal account.

Method 3of 3:

Troubleshooting

1. Disable System Integrity Protection (High Risk). This feature, introduced in Mac OS 10.11 El Capitan, limits access to important files even for the root user.^[6]If you are unable to make the desired changes, you can disable SIP. Only do this if you are confident in your ability and understand that a mistake could wipe your computer or make it nonfunctional:^[7]
   • Restart your computer. Hold down?Command+Rafter you hear the start up noise to enter Recovery Mode.
   • SelectUtilitiesfrom the top menu, thenTerminal.
   • Entercsrutil disable; rebootin Terminal.
   • Let the computer restart as usual. You can now use the steps above to open any application with full root privileges. When you are finished, consider repeating these instructions withenableinstead ofdisableto reinstate SIP.
2. Use nano instead of a graphical text editor. It may be safer and more reliable to edit configuration files using a text editor within Terminal. Nano is a simple option available by default. To use it with root privileges, just entersudo nanofollowed by a space and the file path to your text document. You can then edit the document from within Terminal. When finished, pressControl+Oto save, thenControl+Xto quit nano.
   • For example,sudo nano /etc/hostswill open the hosts file with root access.
   • It's a good idea to make a backup before you edit any configuration files. To do this, entersudo cp filepath_of_config_file new_filepath of backup . For example,sudo cp /etc/hosts /etc/hosts.backupcreates a copy of the hosts file named hosts.backup. If you make a mistake, move the misconfigured file with (for example)sudo mv /etc/hosts /etc/hosts.badand restore the backup withsudo cp /etc/hosts.backup /etc/hosts.^[8]