Full disk access from a launchd daemon

Question

Created Sep ’20

Replies 2

Boosts 0

Views 1.3k

Participants 3

Hello,
I have a security program with a daemon process running as root user started by launchd, which scans documents on users's computer to prevent confidential data leakage. On macOS 10.15.6 adding the program to "Full Disk Access" list in System Preferences doesn't work at all. I also add the Terminal program, but that doesn't make any difference. Do I need to add my program to the root user's TCC database? And how to do that? Thanks!

Boost

Answer 1

DTS Engineer OP

Apple

Sep ’20

Do I need to add my program to the root user's TCC database?

No. Full Disk Access is a system-wide TCC setting.

On macOS 10.15.6 adding the program to "Full Disk Access" list in
System Preferences doesn't work at all.

Does that mean that it used to work prior to 10.15.6?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

0

Answer 2

jerrykrinock OP

May ’21

Until Full Disk Access was introduced, my app had packaged in it a daemon process, launched intermittently by launchd, with the user's privileges. When Full Disk Access was introduced, after many hours of experimenting blindly (no documentation), I concluded that there was no way for this process to have Full Disk Access. To solve the problem, I discarded it and rewrite its functions into a constantly-running Service Management Login Item.

0