Hello,
when FDA rights are given in macOS Monterey, the TCC entry reflects this and the process using ES Client works as expected.
entry as follows: kTCCServiceSystemPolicyAllFiles|com.sophos.endpoint.scanextension|...
after migrating the OS to Ventura beta 11 with the ES Client using process installed, the TCC entries read as follows:
kTCCServiceSystemPolicyAllFiles|com.sophos.endpoint.scanextension|... kTCCServiceEndpointSecurityClient|com.sophos.endpoint.scanextension|...
The old entry is still present, causing our software to report that the precondition of FDA is still valid. But internally the ES Client will report an error when being created, since the newly introduced entry does not reflect the FDA permissions granted.
It can be manually solved by removing the executable from the FDA list in System preferences and re-adding it but this is not the ideal solution.
Is this a know problem?
Frank Fenn
Sophos Inc.