Audit Full Disk Access for Applications

НизкийУровень 2Ручная проверкаmacos

Описание

Starting with macOS 10.14 Mojave, Apple introduced Transparency, Consent, and Control (TCC) to enhance user privacy by requiring apps to get explicit permission before accessing sensitive data or system features. Full Disk Access (FDA) is a privacy category managed by the TCC (Transparency, Consent, and Control) framework.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

GUI: System Settings > Privacy & Security > Full Disk Access > Verify that the applications are set to your organization's requirements. Terminal: sudo /usr/bin/sqlite3 /Library/Application\ Support/com.apple.TCC/TCC.db 'select client from access where auth_value and service = "kTCCServiceSystemPolicyAllFiles"' The output will be what applications have full disk access enabled.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

GUI: System Settings > Privacy & Security > Full Disk Access > Set any listed applications to your organization's requirements > (Optional) Select the + to add applications to the list, or - to remove them.

Свойства

Операционные системы: macos-15
Теги: macossystem-settings
Источник: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.6.2.1 Audit Full Disk Access for Applications