macOS 27 beta — TCC intermittently blocks file writes during postinstall (I/O errors when unpacking .app)

Our app uses a Distribution.xml-based installer. Within the postinstall script, we attempt to untar a signed and notarized .app to the /Applications directory. On macOS 27 (tested up to Developer Beta 4), the tar command randomly fails to write random unpacked files with an I/O error; in the console there is "spolicyd[721] revoked access to "/Applications/XXX.app/file/within". It can be reproduced approximately every 4th install.

Is this happening for anyone else? Any known workaround?

You should definitely file a bug about this. Regardless of what I’m talking about below, I presume that this worked on macOS 26 and thus it should either work on macOS 27 beta or we should have some sort of explanation for why it shouldn’t work.

Make sure to include a sysdiagnose log taken immediately after reproducing the problem.

Please post your bug number, just for the record.


But…

Why are you installing the app from the post-install script? Most installer packages have the content in the package itself, and one presumes that such packages never hit this problem.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

macOS 27 beta — TCC intermittently blocks file writes during postinstall (I/O errors when unpacking .app)
 
 
Q