Check from installing app if Full Disk Access has been enabled?

I have a macOS app that installs an endpoint system extension. After the user clicks "Allow" to allow it to be installed, the user must still scroll up to the "Full Disk Access" section and enable full disk access for the system extension.

It is easy for the user to forget to do this.

Is there an API (or other easy way) for the installing app to check whether the endpoint system extension has been granted full disk access?

I would like to display some big message in the GUI saying "You must enable Full Disk Access" until they do.

Answered by DTS Engineer in 771759022

Is there an API (or other easy way) for the installing app to check whether the endpoint system extension has been granted full disk access?

There is no standalone API for checking whether a particular problem has FDA enabled. However, you can do this from you ES client. Specifically, if FDA is not enabled then es_new_client will return ES_NEW_CLIENT_RESULT_ERR_NOT_PERMITTED. You can test for that specific result and inform the user accordingly.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Accepted Answer

Is there an API (or other easy way) for the installing app to check whether the endpoint system extension has been granted full disk access?

There is no standalone API for checking whether a particular problem has FDA enabled. However, you can do this from you ES client. Specifically, if FDA is not enabled then es_new_client will return ES_NEW_CLIENT_RESULT_ERR_NOT_PERMITTED. You can test for that specific result and inform the user accordingly.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Check from installing app if Full Disk Access has been enabled?
 
 
Q