Fix macOS permission issues for Print Deploy, Hive, or Pocket

Apple macOS Ventura and macOS Sonoma changed how security permissions work. These changes can cause PaperCut Print Deploy, PaperCut Hive, or PaperCut Pocket to fail with “Filter Fail” or “Software Missing” errors.

Understand the permission difference

Permissions determine which users can access or run a file. When permissions are set incorrectly, the system blocks PaperCut from installing or using your printers.

• 700 Permissions: The owner can read, write, or run the file. This often blocks the Common Unix Printing System (CUPS) from working.
• 755 Permissions: The owner has full control, and other users can read and run the file. This is the standard setting for shared drivers and applications.

Fixing Print Deploy Filter Fail errors

If your users see a Filter Fail or Software for the printer is missing message, the CUPS or driver directories likely have restrictive permissions. This happens when macOS Ventura or Sonoma “quarantines” driver files or sets them to 700 permissions.

1. Open Terminal on the affected Mac.
2. Clear the Apple quarantine flags from the printer library: sudo xattr -r -c /Library/Printers/
3. Apply the correct 755 permissions to the entire directory: sudo chmod -R 755 /Library/Printers/
4. Fix the CUPS backend and filter directories by typing: sudo chmod 755 /usr/libexec/cups/{backend,filter}
5. Press Enter, then type your administrator password.
6. Upgrade the Print Deploy client to version 1.8.2594 or later. This version includes a permanent fix for these permissions.

Why This Happens

macOS Ventura and Sonoma are stricter with third-party drivers. If a driver is cloned from a “Reference Mac” that has restrictive permissions, the deployed version will fail on the destination Mac. Running these commands ensures the print system (CUPS) has the “Execute” rights it needs to run the driver.

Fixing PaperCut Hive or PaperCut Pocket linking issues

If the PaperCut Hive client is installed but you cannot link the user, the data folder might be restricted to the root user.

• On the Mac, open Terminal.
• To check the current permissions, type: ls -lah /Library/PaperCut\ Hive.
• If the data folder displays drwx------ (700), change the permissions to 755: sudo chmod 755 /Library/PaperCut\ Hive/data.
• Restart the Mac, then try to activate the user again.

Setting recommended permissions for launchd

If you use launchd to start the PaperCut User Client, use these settings to ensure the application stays active.

• To set the LaunchAgent configuration as readable by the system, type: sudo chown root:wheel /Library/LaunchAgents/com.papercut.client.plist
• sudo chmod 644 /Library/LaunchAgents/com.papercut.client.plist.
• To set the PCClient application bundle as executable, type: sudo chmod -R 755 /Applications/PCClient.app.
• To remove the quarantine flag so macOS trusts the application, type: sudo xattr -dr com.apple.quarantine /Applications/PCClient.app.

We have an extesnive article about this here: https://www.papercut.com/kb/Main/MacClientStartupWithLaunchd