Many of my company's desktop applications support a method of deploying custom configurations if they're stored in the same directory as the installer to make deployments for smaller scale environments easier for system administrators. During install time, the installer looks for a particular file and copies it into place if it is there.
As of Big Sur, however, we receive a new "Operation not permitted" when attempting to copy the file if the installer and the custom config are within a user account directory (e.g., /Users/<user>/Downloads).
Example command that's reporting this error:
install -o root -g wheel -m 0444 /Users/aUser/Desktop/my-custom-config.json /Library/Preferences/MyApp/my-custom-config.json
This error doesn't occur if they're stored in a "less" protected area, like /Users/Shared.
My suspicion is Big Sur has introduced a new protection against the installer scripts being able to access that location, but historically that's usually when a variation of the "Do you want this application to access..." dialog rises. I've submitted this under feedback but also wanted to post here to see if anyone has seen official documentation indicating this new protection and if they intend to have that access dialog or not.
As of Big Sur, however, we receive a new "Operation not permitted" when attempting to copy the file if the installer and the custom config are within a user account directory (e.g., /Users/<user>/Downloads).
Example command that's reporting this error:
install -o root -g wheel -m 0444 /Users/aUser/Desktop/my-custom-config.json /Library/Preferences/MyApp/my-custom-config.json
This error doesn't occur if they're stored in a "less" protected area, like /Users/Shared.
My suspicion is Big Sur has introduced a new protection against the installer scripts being able to access that location, but historically that's usually when a variation of the "Do you want this application to access..." dialog rises. I've submitted this under feedback but also wanted to post here to see if anyone has seen official documentation indicating this new protection and if they intend to have that access dialog or not.