Il problema che ho riscontrato è che dopo un ripristino manuale, la proprietà dei file in / var / db non era corretta. Tutte le directory erano erroneamente di proprietà di root.
Per 10.13.6 i proprietari corretti sembrano essere:
drwxr-x--- 6 _analyticsd _analyticsd 192 Aug 16 19:18 /var/db/analyticsd
drwx------ 3 _applepay _applepay 96 Aug 13 17:06 /var/db/applepay
drwxr-xr-x 2 _astris _astris 64 Apr 9 21:28 /var/db/astris
drwxr-x--- 2 _cmiodalassistants _cmiodalassistants 64 Apr 9 21:28 /var/db/cmiodalassistants
drwx-----x 4 _datadetectors _datadetectors 128 Aug 18 10:26 /var/db/datadetectors
drwxr-xr-x 4 _displaypolicyd _displaypolicyd 128 Aug 18 18:57 /var/db/displaypolicyd
drwxr-xr-x 3 root wheel 96 Aug 13 18:02 /var/db/efw_cache
drwxr-xr-x 2 _findmydevice _findmydevice 64 Apr 9 21:28 /var/db/findmydevice
drwxr-x--- 4 _fpsd _fpsd 128 Aug 16 04:13 /var/db/fpsd
drwxr-x--- 2 _geod _geod 64 Apr 9 21:28 /var/db/geod
drwxr-x--- 3 _hidd _hidd 96 Aug 3 02:53 /var/db/hidd
drwxr-x--- 4 _locationd _locationd 128 Aug 18 18:56 /var/db/locationd
drwx------ 3 _usbmuxd _usbmuxd 96 Aug 13 17:06 /var/db/lockdown
drwxr-x--- 3 _nsurlsessiond _nsurlsessiond 96 Aug 3 02:52 /var/db/nsurlsessiond
drwxr-xr-x 3 _nsurlstoraged _nsurlstoraged 96 Aug 13 18:07 /var/db/nsurlstoraged
drwxr-xr-x 2 _ondemand _ondemand 64 Apr 9 21:28 /var/db/ondemand
drwxr-x--- 3 _securityagent _securityagent 96 Aug 13 17:06 /var/db/securityagent
drwxr-xr-x 3 _softwareupdate _softwareupdate 96 Aug 18 18:57 /var/db/softwareupdate
drwxr-x--- 4 _timed _timed 128 Aug 18 18:57 /var/db/timed