Which application is taken in consideration with TCC

Question

juliencrypt OP

Created Nov ’23

Replies 1

Boosts 0

Participants 2

Hello,

Let's imagine an application (Application A) which launch another application (Application B). These applications are bundle apps.

What happens if Application B tries to read a file in current user's Documents folder ?

TCC will check if the application is allowed to access to Documents folder. But will it check this right for application A or application B (or both ?)

I have tried to run an application from Terminal. My terminal is authorized to access to Documents folder. And i am surprised because TCC did not asked me to allow the application itself. It seems TCC is looking for parent process rights. Can you confirm ?

Thanks

Boost

Answer 1

DTS Engineer OP

Apple

Nov ’23

See the discussion of responsible code in On File System Permissions.

In that post I deliberate avoid going into the details of how this is implemented because that’s both complex and subject to change. If you’re building a product for the Mac, please post the specifics of what problem you’re trying to solve. OTOH, if you just want to know how this works, feel free to explore that space on your own.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0