Use sudo in the mac-clean.sh script.
diff --git a/mac/mac-clean.sh b/mac/mac-clean.sh
index 0bae159..130613e 100644
--- a/mac/mac-clean.sh
+++ b/mac/mac-clean.sh
@@ -5,7 +5,7 @@
 sudo launchctl unload /Library/LaunchDaemons/jenkins.plist
 
 cd /Users/ci
-rm -rf /var/tmp/_bazel_ci workspace android-ndk-* android-sdk-* node jenkins.slave.*.log slave.jar
+sudo rm -rf /var/tmp/_bazel_ci workspace android-ndk-* android-sdk-* node jenkins.slave.*.log slave.jar
 curl https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/mac/mac-android.sh | bash
 curl https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/mac/mac-nodejs.sh | bash
 curl -o slave.jar http://master.ci.bazel.io/jnlpJars/slave.jar